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Information in the 1995 Flash Memory Databook Documentation Update replaces information 
found in the 1995 Flash Memory Databook, Volumes I and II. In some chapters of the 
databook, individual pages have been revised. In some cases, entire documents have been 
replaced. 

Please note that this update contains several additional documents not found in the 1995 Flash 
Memory Databook: 

• AP-603 Symmetric Block Format Exchanging Data with FFS Systems 

• AP-608 Implementing a Plug and Play BIOS Using Intel’s Boot Block Flash Memory 

• AP-609 Interfacing the Intel386™ EX Embedded Processor to Intel Flash 

• AP-610 Flash Memory In-System Code and Data Update Techniques 
Thank you for your interest in Intel’s Flash memory products. 
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1.0 INTRODUCTION 

The ability to update flash memory contents with the 
system operational distinguishes flash memory from 
other nonvolatile technologies such as ROM and 
EPROM. This capability is key for using flash memory 
in a wide range of applications: 

• Code storage/execution (code DRAM and ROM 
replacement), 

• Data storage (EEPROM, battery RAM emulation, 
etc.), and 

• File storage (flash-based solid state drive) 

System software implementations for in-system code 
and data update must comprehend algorithm execution 
during flash memory program/erase. Implementations 
also vary according to the level of system code/data 
access required during update. 

This application note discusses these topics and gives 
general recommendations that can be tailored to specific 
system needs. It focuses on Intel’s Boot Block, 
FlashFile™ and Embedded Flash RAM memories which 
have on-chip program/erase automation and block 
erasure. However, many of the concepts can be equally 
applied to Intel’s bulk erase flash memories. 

2.0 GENERAL INFORMATION 

Definition of Terms 

Design engineers can select from up to three unique 
approaches to update stored flash memory information. 
Before proceeding, let’s define these terms to make it 


clear what we will and won’t be discussing in this 
application note: 

1. In-System Write (ISW): As first described earlier, 
during an in-system update the system is powered up 
and either partially or fully operational. The system 
CPU (see Figure 1) executes the flash memory 
program/erase algorithms and obtains new code/data 
from one of several sources (serial or parallel port, 
floppy or hard disk drive, modem, etc.). 

2. On-Board Programming (OBP): In this approach, 
the flash memory is also installed on the system 
board. However, OBP does not use the system CPU 
and, in fact, commonly powers down the processor 
or holds it in a HALT mode. The flash memory 
connects to an off-board “computer” such as a board 
tester or prom programmer. This off-board 
intelligence provides the necessary commands and 
data to erase and reprogram the flash memory. This 
technique is covered in other documentation 
available from Intel Corporation. See the Additional 
Information section of this application note. 

3. PROM Programming: This approach was first made 
popular back in the days of PROMs and EPROMs. 
The flash memory is initially programmed, and is 
reprogrammed, by removing it from the system 
board and socketing it in dedicated hardware called a 
PROM programmer. Intel works closely with a wide 
range of PROM programmer vendors to ensure 
support for all of its flash memory products. See the 
Additional Information section of this application 
note for details. 
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Figure 1. The System CPU Controls the In-System-Write Flash Memory Update 
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Read-While-Write 

The fundamental concept to understand when 
considering in-system updates is that of read-while- 
write. Stated simply, it is currently NOT possible with 
any of today’s flash memory technology alternatives to 
read from the flash memory array while simultaneously 
programming or erasing it. There are several basic 
reasons for this: 


a. During program or erase, the flash memory row 
and column decode architecture results in high 
voltages present throughout the array. Isolating 
these voltages to a specific byte/word or block 
would have excessive die size and (therefore) 
silicon cost impacts given that inexpensive 
system implementation alternatives exist. Keep 
reading for details! 

b. Intel’s Boot Block, FlashFile and Embedded 
Flash RAM memories all have on-chip 
program/erase automation. After these flash 
memories receive program or erase command 
sequences, they automatically transition to a 
mode where they provide status register 
information (versus array or other data). This 
transition quickly provides the system with the 
information it needs to determine program/erase 
status, minimizing system software overhead and 
maximizing effective write/erase performance. 

Flash memory array reads (to access code or data) CAN 
take place at any time that the flash memory automation 
is READY (either completed or suspended). Figure 2 
gives a simple flash memory update algorithm example. 
It shows portions of the code that must be executed off- 
chip, and shaded areas show “windows” where the flash 
memory array can be accessed, if needed, by writing the 
Read Array command and then reading from desired 
locations. These “windows” will be described in detail 
in Section 4.0. Thanks to on-chip automation, the 
amount of code executed off-chip to actually 
program/erase the flash memory is very small. Overhead 
needed to obtain new code/data from the system varies 
with the method chosen. 



Figure 2. Simple Code/Data Block Update 
Algorithm Shows Shaded "Window" 
Opportunities for Array Reads 
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What Amount of System Functionality Is 
Needed During Update? 

The answer to the above question is key to 
understanding the amount of software architecting 
needed to integrate flash memory into your design. Use 
the following question as a reference for where to 
continue reading: 

Q. Can you dedicate the system exclusively to the flash 
memory update and ignore all other non-related 
interrupts? Said another way, can you take the system 
“off-line” during flash memory updates? 

Ai. If your answer is “yes,” the software implementation 
is very straightforward. See Sections 3.0 and 5.0. 

A 2 . If your answer is “no,” the specific software 
implementation varies. One approach uses redundant 
system memory to separate the execution and 
storage/backup regions. Another technique eliminates 
this redundancy but depends on an understanding of 
interrupt latency, interrupt frequency and its variability 
with time. See Sections 4.0 and 5.0. 

Dedicated Blocks for System Boot Code: 
Recovery from System Power Loss or Reset 
during Flash Memory Update 

Several of the approaches described in Sections 3.0 and 
4.0 that follow use system RAM to execute the flash 
memory update algorithms. This brings up a logical 
question; what happens if the system resets or loses 
power in the middle of a flash memory update? In this 
case, system RAM contents will be invalid, including 
the flash memory update code. The byte being 
programmed or the block being erased when system 
reset/power loss occurs will be left in an indeterminate 
state and will need to be reprogrammed/erased. 

Flash memory’s blocked architecture provides 
protection for system boot code and enables the system 
to recover fully from incomplete code updates. All boot 
block components as well as 16-/3 2-Mbit FlashFile and 
embedded flash RAM memories also allow hardware 
“lock” of boot code for additional protection. This boot 
code, after minimally initializing system hardware, 
should execute a checksum verify of the remainder of 
the flash memory. If this checksum “passes,” system 
boot can continue. If a checksum “fail” is obtained, this 
reflects an incomplete program or erase, and the system 
should alert the user and execute a repeat update. Figure 
3 flowcharts this algorithm. 
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Figure 3. Checksum Validation Confirms Flash 
Memory Integrity 


Intel’s 16-/3 2-Mbit FlashFile and embedded flash RAM 
memories indicate via Status Register feedback whether 
an erase in progress has been aborted by power loss or 
hardware power-down. The 16-Mbit Flash Product 
Family User’s Manual covers this topic in detail. See the 
Additional Information section of this application note. 


3.0 "OFF-LINE" FLASH MEMORY 
UPDATES 

Reviewing the Q-and-A discussion earlier, you should 
be reading this section if you can ensure that the system 
will receive no interrupts that will require flash memory 
array access during the update process. Examples of this 
scenario are numerous: 

• Cellular phones that are placed in a special 
“maintenance” mode for updates. 

• PC BIOS applications where the user runs a 
dedicated “update” routine to upgrade the resident 
flash memory code. 

• Laser printers that can be taken “off-line” prior to the 
update process. 

• Many other applications. . . . 
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Again referencing Figure 2, we see that the shaded areas 
of the algorithm can be ignored since flash memory 
array access is not needed until after the update is 
complete. The resultant algorithm, shown in Figure 4, is 
small in size and straightforward in implementation. It 
can be stored within one of the flash memory blocks if 
desired, and is copied to/executed from an external 
memory. Scenarios that follow show two of the many 
possible implementation options. 

Technique 3.1: Algorithm Execution from RAM 

The RAM in this technique can be located in several 
different places within the system, such as: 

• In a discrete SRAM or DRAM chip 

• Integrated within an embedded microprocessor or 
microcontroller 

• Integrated within a system ASIC 

• In a Page Buffer of a separate 16-Mbit FlashFile 
memory 

An important requirement is that the system be able to 
execute code (not just read and write data) out of the 
RAM. Ideally, to minimize system overhead and 
maximize effective update throughput, the update 
algorithm should be present in RAM at all times during 
system operation. If this is not possible due to “RAM 
crunch,” the up-front time required to upload the 
algorithm to RAM must be factored into system update 
performance calculations. 


intgl. 



Figure 4. The Block Erase/Program Algorithm 
Is Simplified for "Offline" Updates 
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Figure 5. Executing the Update Algorithm 
Requires Minimal System RAM 


Figure 5 shows the overall flowchart used when 
executing the update algorithm out of system RAM. As 
mentioned earlier, flash memory automation means that 
the amount of code executed off-chip to actually 
program/erase the flash memory is very small. Overhead 
needed to obtain new code/data from the system varies 
with the method chosen (diskette, modem, serial or 
parallel port, etc.). 

Does your system include at least one 16-/3 2-Mbit 
FlashFile memory and other flash memories? If so, you 
can potentially use the 256 byte page buffer of the 
FlashFile memory as the execution RAM while updating 
the other flash memories! Note: it is NOT possible to 
completely execute an update algorithm from the page 
buffer of a flash memory while simultaneously updating 
that same memory. 

Technique 3.2: Algorithm Execution from 
Nonvolatile Memory 

If the system contains multiple flash memories, 
implementation is very straightforward. Store a 
duplicate copy of the update code in each flash memory, 
and execute from one device while updating the other(s). 
Figure 6 gives one example, using two Intel 28F001BX 
Boot Block flash memories. 

This same technique can be applied to any other 
nonvolatile memory in the system. Examples include 
boot ROM, ROM locations within an ASIC or 
nonvolatile memory integrated within an embedded 
microprocessor or microcontroller. 



Figure 6. Executing the Flash Memory Update Algorithm from Another Nonvolatile Memory Requires 

No Dedicated RAM 
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Figure 7. Redundant System RAM Enables Access to Ail Code during Flash Memory Update 


4.0 "ON-LINE" FLASH MEMORY 
UPDATES 

Reviewing the Q-and-A discussion earlier, you should 
be reading this section if the system must be partially or 
fully operational during the flash memory update 
process. Said another way, it must be able to detect and 
service some or all possible system interrupts. Examples 
of this scenario include: 

• Cellular base stations that must be able to service 
incoming connection requests. 

• Data Communications router and hub networks that 
cannot be taken off-line. 

• Telecommunications PBX switch networks that must 
be always-operational. 

Technique 4.1: Code Redundancy in System 
RAM 

This system memory configuration, shown in Figure 7, 
is relatively common today in high-performance 
systems. The system boots from flash memory, copies 


code to code DRAM (sometimes decompressing in the 
process) and jumps to DRAM for execution. DRAM is 
used here primarily because of its high-performance 
reads. 

In this case, the system has access to all interrupt service 
routines during the flash memory update process. After 
update is complete, a quick system “reset” will reboot 
the system and load DRAM with the new code. The 
amount of time that the system cannot service interrupts 
is the combination of system reboot and copy-to-DRAM 
delays. 

Technique 4.2: Code Redundancy in System 
Flash Memory 

Figure 8 gives an example of this system memory 
configuration. Two banks of flash memory components 
store “previous” and “latest” versions of system code. 
The system executes from one bank while updating the 
other bank. Once update successfully completes, an 
address or control signal “toggle” swaps the “previous” 
and “latest” banks and enables immediate execution of 
the latest software version. 
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Figure 8. Dual Flash Memory Banks Eliminate RAM Reload Delays 


The obvious advantage of this approach include constant 
access to all interrupt service routines and a non-existent 
reboot delay. Memory redundancy will incur additional 
system cost, which must be balanced against advantages 
and compared to total system cost (and price) to 
determine applicability of this approach. 

Technique 4.3: Leveraging Flash Memory 

Automation: Programming Performance and 
Erase Suspend Latency 

This approach eliminates both the redundancy of 
multiple memories and the reboot delay of the 
flash/DRAM solution in Technique 4.1. It is especially 
attractive for use with Intel’s Embedded Flash RAM 
memories, whose read performance approaches or 
exceeds that of DRAM. In this case, the need for 
redundant code DRAM (for performance reasons) is 
eliminated. 

Before continuing your reading of this section, please do 
the following research: 


• Analyze the latencies of each of your system 
interrupt routines. Which routines take the longest to 
execute, and how long do they take? 

• Analyze the profile of frequency of interrupts. How 
often do interrupts occur, and how does this 
frequency vary with time of day, week, month and 
year? Can updates be scheduled for times when the 
interrupt frequency is low (or ideally, zero)? 

The flash memory automation approach “hides” 
byte/word programming operations within the time 
delay between interrupts. It also “hides” slow block 
erase by using erase suspend/resume to read from the 
flash memory when required. Referring back to 
Figure 2, we see that reads from the flash memory (to 
access interrupt service routines) can occur at the 
conclusion of programming, at the conclusion of erase 
and while erase is suspended. This approach exploits 
these access “windows.” 

As an example, we’ll construct the following scenario 
(reference Figure 9). 
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Flash Memory Block Architecture as Seen by System 


System Memory Map 



Figure 9. Leveraging Flash Memory Automation Eliminates System Memory Redundancy, Enables 
Full Interrupt Servicing throughout the Update Process 
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Figure 10. Available Time between System Interrupts Enable Flash Memory Programming 


Components 

Two 28F016SV flash memories (5V V C c, 12V V PP ), 
each xl6, interfacing to a x32 system bus 

Small system SRAM 

Timings 

System interrupt frequency (period) = every 200 ps. 

Longest interrupt service routine latency = 50 ps. 

Flash memory per-location programming time = 6 ps 
(typical) 

Flash memory erase suspend latency = 10 ps (typical) 
Interrupts During Programming 

Looking first at programming (Figure 10), we see that 
the goal is to execute at least one programming 
operation within the period between interrupts. In the 
scenario described above, subtracting interrupt service 
routine latency from interrupt period gives a 150 ps 
“window” in which programming can occur. At 6 ps per 
double-word, up to 25 locations can be programmed 
within each interrupt period. 


200 ps (interrupt period) - 50 ps (ISR latency) = 150 ps 
(programming “window”) 

150 ps (window)/6 ps (programming time per location) 
= 25 locations 


Intel’s 16-/32-Mbit FlashFile memories contain on-chip 
page buffers, each 256 bytes in size, that dramatically 
increase effective per-byte programming performance. 
For example (averaged over a page), typical 
programming performance for the Intel 28F016SV is 2.1 
ps/byte at 5V Vcc and 12V V PP . Using these page 
buffers may, in some cases, allow the system to program 
even more bytes within each interrupt programming 
“window.” 

Interrupts During Erase 

Now for erase. If an interrupt occurs during erase, the 
system must be able to suspend erase, read the flash 
memory array and service the interrupt, all before the 
next interrupt. Looking at Figure 11, adding erase 
suspend latency to interrupt service routine latency and 
subtracting from interrupt period shows that 140 ps of 
flash memory erase automation can execute between 
each interrupt. Obviously, block erase time will extend 
beyond that specified in the device datasheet since erase 
is being repeatedly suspended. 


200 ps (interrupt period) - [10 ps (erase suspend 
latency) + 50 ps (ISR latency)] = 140 ps (erase 
“window”) 
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Figure 11. Available Time between System Interrupts Enables Flash Memory Erase, and Erase 
Suspend Allows Array Access for Interrupt Service Routines 


Accessing the Existing Version of Code in a Block Being 
Updated 

All well and good. We’ve shown how to access code in 
other flash memory blocks (for example blocks 2-30) 
while erasing or reprogramming another block (for 
example, block 1). But what happens if the code you 
need to read is the code in the process of being updated? 
Where do you put the previous version of this code? 

One approach, shown in Figure 9, assumes that at least 
one spare block is available in each flash memory (for 
example, block 31). Before updating any block, copy 
that block’s contents to the spare block and redirect 
appropriate interrupt vectors to point to that block. After 
update is complete, redirect interrupt vectors back to the 
original block, erase the spare block and move to the 
next block to be updated. This approach will obviously 
“cycle” block 31 more than any of the others, but this is 
often acceptable if the number of expected code updates 
through system lifetime is not excessive. 

If spare blocks are not available or expected updates are 
numerous, copy block information to RAM before 
updating. This approach requires dedicated RAM for 
this function but needs much less RAM than a technique 
like Technique 4.1, where the entire flash memory array 
is shadowed. 

Putting It All Together 

Referring back to our example scenario in Figure 9, we 
conclude with the following summary. 

Component block 0 is locked and stores system boot 
code and the flash memory update routine. The interrupt 
vector table, stored in an unlocked block to enable its 
revision, is copied from flash memory to RAM on 
system power-up. During flash memory update, interrupt 
vector table contents point to the flash memory update 
routine, also copied to RAM. When an interrupt occurs, 
this routine determines via a bit “flag” if block erase is 


in progress and if so, suspends erase before jumping to 
the necessary interrupt service code. After servicing the 
interrupt, the update routine resumes erase or executes 
location programming operations, depending on where 
in the update the interrupt occurred. 

Ideally, to minimize system overhead and maximize 
effective update throughput, the update algorithm should 
be present in RAM at all times during system operation. 
If this is not possible due to “RAM crunch,” the up-front 
time required to upload the algorithm to RAM must be 
factored into system update performance calculations. 

Before erasing and reprogramming a flash memory 
block, system software copies block contents to the 
spare block and appropriately redirects the interrupt 
vector table. After block erase/reprogram completes, the 
update routine redirects interrupts back to the block, 
erases the spare block and moves to the next block to be 
updated. 

Program/Erase Suspend Performance , Typical/Max vj. 
Cycling 

Depending on how “tight” the timings are using the 
equations of Technique 4.3 with your specifications, and 
depending on the expected flash memory update 
frequency (cycling) through system lifetime, additional 
information may be needed to determine whether this 
technique is applicable to your design. In this case, 
please contact your local Intel or distribution sales office 
for additional information on typical/max program, erase 
and erase suspend specifications as a function of cycling 
for the Intel flash memory of interest. 

What If Interrupt Period Is too Short or Interrupt 
Latency Is too Long? 

Technique 4.3 assumes that system interrupt timings 
allowed sufficient time for erase suspend and byte/word 
programming. If at first inspection this does not seem to 
be the case for your design, answer the following 
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questions in the process of further analyzing your 
system interrupt profile: 

• Do interrupts occur fairly regularly as a function of 
time, or in bursts of activity followed by periods of 
“quiet?” If the latter, your system software can hold 
off attempting location programming or resuming 
erase until it detects a specified time span of system 
“inactivity.” 

• Do one or several interrupt service routines have 
substantially longer latencies than others? If so, 
system software can hold off attempting 
programming or initiating/resuming erase when these 
specific interrupts occur. 

In some cases, it may be difficult to hold off 
programming due to a fixed data write transfer rate to 
the flash memory subsystem. In these cases, a small 
RAM FIFO can potentially be integrated within the 
interface logic (ASIC, FPGA, etc.). This FIFO acts as a 
buffer between system and flash memory and 
accommodates programming delays due to interrupt 
bursts or long ISR latencies. 

As an alternative, the approaches described in 
Techniques 4.1 and 4.2 can be reviewed to determine 
applicability with your system design criteria. 

Programming (Writing) during Erase 

Some system designs require both the ability to quickly 
read code from flash memory and to quickly write 
information to flash memory in response to an interrupt. 
Intel’s 16-Mbit FlashFile memories offer enhanced on- 


Order 

Number 

Document 

292046 

AP-316 “Using Flash Memory for In-System Reprogrammable 
Nonvolatile Storage” 

292059 

AP-325 “Guide to First Generation Flash Memory Reprogramming” 
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AP-341 “Designing an Updateable BIOS Using Flash Memory” 
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AP-604 “Using Intel’s Boot Block Flash Memory Parameter Blocks to Replace 
EEPROM” 

292126 
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NOTES: 

Please call the Intel Literature Center at 1 -800-548-4725 to request Intel documentation. International customers should contact 
their local Intel or distribution sales office. 

Additional information can be requested from Intel’s automated FaxBACK* system at 1-800-628-2283 or 916-356-3105 
(+44(0)793-496646 in Europe). 


chip automation that, among its features, automatically 
suspends block erase to service queued programming 
operations to other blocks. 

5.0 CONCLUSION 

Intel has developed a wide range of documentation and 
other collateral to assist you in developing system 
software solutions and profiling cycling through system 
lifetime. Please contact your local Intel or Distribution 
Sales Office for more information on Intel’s flash 
memory products. 

6.0 ADDITIONAL INFORMATION 


Documentation 

Device datasheets provide in-depth information on 
device operating modes and specifications. 

The 16-Mbit Flash Product Family User’s Manual (order 
#297372) gives detailed information on the enhanced 
automation of Intel’s 16-/32-Mbit FlashFile and 
Embedded Flash RAM memories. Included flowcharts 
assist you in developing system software. 

The following application notes deal specifically with 
software interfacing to Intel flash memories: 
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FLASHBuilder 

This Windows-based utility is a hypertext aid to 
understanding the automation of Intel’s 16-Mbit 
FlashFile and Embedded Flash RAM memories. 
FLASHBuilder automatically generates code segments 
in C or ASM- 86 for flash memory program/erase that 
you can easily “paste” into your system software. It also 
includes a cycling utility and power/performance 
benchmark utilities for the 28F016XS and 28F016XD. 

FLASHBuilder is available from the Intel Literature 
Center via order number #297508. It can also be 
downloaded from the Intel BBS at 916-356-3600 
(+44(0)793-49-6340 in Europe). 


PROM Programming Support 

Intel works closely with a large number of world-wide 
PROM programmer vendors to ensure timely support for 
its flash memory products. This programming support 
information, updated frequently, is available on 
FaxBACK. 


On-Board Programming 

An application note will be available in early 1995 that 
discusses hardware and software recommendations for 
OBP using either a board tester or PROM programmer. 
Contact your local Intel or distribution sales office for 
more details. 


VHDL and Verilog Models 

VHDL functional simulation models for the 28F016SV, 
28F016XD and 28F016XS are available now; please 
contact your local Intel or distribution sales office. 
Verilog models for these devices will be available in 
early 1995. 
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1.0 INTRODUCTION 

The Intel386™ microprocessor family has gained a wide 
acceptance in the world of embedded applications. The 
Intel386 EX embedded processor is a very highly- 
integrated member of the Intel386 microprocessor 
family. There is a vast base of embedded applications 
developed for the 80C186 product family. When these 
applications require higher performance and address 
space, the Intel386 EX architecture provides a natural 
migration path to protect the code investment in the Intel 
architecture along with DOS compatibility. A DOS- 
based PC provides an easy, cost-effective means to 
develop, test, debug and port embedded application 
code. 

As embedded system designers take advantage of DOS 
capability in the PC platform, a revolutionary system 
architecture is required to meet space and power 
requirements. 

• An architecture that is not bound by what has been 
done before with existing memory architecture, but 
free to meet the demanding requirements of 
embedded end-users. 

• An architecture free to adopt and accommodate new 
technological advances in software and hardware, 
while protecting end-users initial base hardware 
investment. 

Implementing this new system architecture requires an 
alternative to the traditional PC storage media such as 
ROM, DRAM, floppy disk and hard disk. The solution 
is Intel’s Boot Block and FlashFile™ memory (see 
architecture comparison in Figure 1). 


APPLICATION 

DATA 

MANIPULATION 

CODE 

EXECUTION 

FILE & CODE 
STORAGE 


DRAM 

DRAM/ROM 

FDD/HDD 

Desktops 

f 

Embedded 

DRAM 

FLASH 

FLASH 

- Resident Disk 

- Flash Card 

- Flash Drive 


Figure 1. Architecture Comparison 


Intel Flash memory provides in-system write 
capabilities, along with selective block erase and 
program/erase automation which are gaining wide 
acceptance in the embedded market. These features help 
cost-effective field updates and provide quick time-to- 
market solutions in most applications. 

By combining flash memory with this new system 
architecture, completely new types of computers are 
now possible that fit in the palm of your hand and 
replace or integrate many of the code or storage 
functions of other memory types. Flash memory can be 
used for storing eXecute-In-Place (XIP) code, such as 
ROMed DOS, in the system’s memory map while 
additionally functioning like a disk for file and program 
storage. Since this type of design features flash memory 
resident on the embedded system’s motherboard and is 
typically arranged in an array, it is described as a 
Resident Flash Array (or RFA). To further differentiate 
the two tasks of an RFA, the file store task is called a 
Resident Flash Disk (RFD), while the XIP task is called 
Resident Flash for XIP (or RFX) code storage. 


1 .1 Why a New Memory 
Architecture? 

The ideal embedded memory system is: 

• Power Conscious (prolongs battery life and reduces 
heat) 

• Dense (stores lots of code and data in a small amount 
of space but weighs very little) 

• Updateable (allows in-situ code enhancements) 

• Fast (lets you read and write data quickly) 

• Inexpensive (low cost-per-megabyte) 

• Reliable (retains data when exposed to extreme 
temperature and mechanical shock) 

While embedding the PC architecture, designers have 
grappled with how to construct memory systems that 
meet the above criteria. Embedded computing makes the 
system design even tougher with more stringent 
requirements for low power, low volume, less weight 
and harsh environments. The best combination available 
for embedded PC designs in their infancy was the same 
as used for the desktop; solid-state memory and 
magnetic storage, i.e., SRAMs, DRAMs plus magnetic 
hard disks. DRAMs are dense and inexpensive, yet 
slower than the processors they serve, and they are 
volatile. SRAMs, although fast enough to keep pace 
with processors, are relegated to caching schemes 
(compensating for DRAM’s slowness) due to low 
density and high cost while also being volatile. 
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Magnetic hard disks are dense, inexpensive on a cost- 
per- megabyte basis and nonvolatile. However, they are 
also slow, power-hungry, susceptible to damage from 
physical shock, and take up a sizable amount of volume. 

Embedded computing designs cannot depend on hard 
drives as do desktop or portable PCs, due to the size 
limitations. Furthermore, vitally important data such as 
credit card numbers or transactions, signatures, or 
patient monitoring information demands reliability of 
the highest order. The solution is Intel Flash memory. 

1.2 The Flash Memory Alternative 

High Density 

Intel’s ETOX™ IV flash memory cell is 30% smaller 
than equivalent DRAM cells; therefore, it will closely 
track DRAM density. Flash memory is more scaleable 
than DRAM because the flash storage cell is not 
sensitive to soft error failure; therefore, it can have a 
more simple cell structure. As density increases and 
process lithography continues to shrink, flash memory 
will pace, and ultimately overtake, the DRAM 
technology treadmill. 

Updateable 

ROMs and EPROMs may offer lower device costs, but if 
servicing the customer or end-user is important to an 
OEM, overall system cost must be factored in. Although 
ROMs and EPROMs are nonvolatile, changing the code 
within them is either very difficult (in the case of 
EPROMs), or entirely impossible (in the case of ROMs). 
Whole inventories of ROMs could be lost in the event of 
a catastrophic bug, while an innovative design with flash 
memory can be Updated in the factory or by end-users 
via networks, OEM Bulletin Board Systems, or other 
memory cards. Updating systems could actually become 
a second source of income for OEMs and Independent 
Software Vendors (ISVs), enhancing the quality of the 
product while increasing end-user satisfaction. 

Power Conscious 

Intel’s flash memory provides a deep power-down 
mode, reducing power consumption to typically less 
than 0.2 fxA. Typical read current is only 20 mA, while 
typical standby current (flash memory not being 
accessed with GE# high) is only 30 ^. Additionally, 
flash devices operating at 3.3V are available for state-of- 
the-art low-power consumption designs. 


Fast 

Do not be misled by technology-to-technology speed 
comparisons. Architecting a system around flash 
memory bypasses the code/data bottleneck created by 
connecting slow mechanical serial memory (such as 
disks) to a high-performance, parallel bus system. For 
example, data seek time for a 1.8" magnetic hard disk is 
20 ms, plus an 8 ms average rotational delay, while flash 
memory write time is less than 0.1 ms. At the chip level, 
read speeds for flash memory are about 70 ns. Therefore, 
either direct execution of code from flash memory or 
downloading to system RAM will dramatically enhance 
overall system performance. 

Nonvolatile 

Unlike DRAM or SRAM, flash memory requires no 
battery back-up. Further, Intel’s flash devices retain data 
well beyond the useful lifetime of most applications. 

Rugged and Reliable 

On average, today’s hard-disk drives can withstand up to 
10 Gs of operating shock. Intel’s flash memory can 
withstand as much as 1000 Gs. Flash components can 
operate beyond 70°C while magnetic drives are limited 
to 55°C. Intel’s flash memory can be cycled 100,000 
times per block or segment. By employing wear-leveling 
techniques, the cycling of a device can be minimized. 
For example, a 10-KB file written every 5 minutes, 
24-hours a day to a 20-MB flash array takes 16 million 
hours, or 1826 years, before reaching the 100,000 cycle 
level. 


1.3 Summary 

Many applications benefit from ROMed or XIP versions 
of code, particularly hand-held personal computers, 
vertical application pen-based clipboards, and industrial 
control and data accumulation equipment. These 
applications pose system design constraints requiring 
small form factor, low-power consumption, and rugged 
construction due to active mobile users or harsh 
environments. Exposure to shock, vibration, or 
temperature extremes is common, precluding the use of 
rotating media. Flash memory provides an excellent 
code storage choice for such system designs featuring 
thin TSOP packaging, low (deep power-down mode) or 
zero (capability to shut off power without losing data) 
power consumption, 1000 G shock resistance and 
extended temperature products. Additionally, flash 
memory provides remote or end-user update capability 
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allowing OEMs to service their products more 
efficiently and add new software features and 
applications after the sale. 

Compared to RAMs and ROMs, the timing requirements 
for flash are slightly different. This application note 
explores those differences and provides a detailed 
analysis of the interface between the 28F400BX and the 
Intel386 EX CPU. Along with the analysis, one possible 
solution is provided. To make all of the read and write 
calculations easier for the users, a spreadsheet-based 
timing analysis for the Intel386 EX CPU interface to 
flash is posted on Intel’s application support BBS at 


916-356-3600. The filename is EXFLASH.ZIP and it is 
located in the E3X\REF_DSGN section. A snapshot of 
this spreadsheet is provided in Appendix C. 

2.0 FLASH TIMING PARAMETERS 

The timing parameters provided in Tables 1 and 2 lists 
the most important parameters to pay attention to when 
interfacing to Intel’s Boot Block and FlashFile memory 
families. 


Table 1. Read Timing Parameters 


Timing Description 

28F001BX 

28F200BV<2) 

28F400BV<3) 

28F008SA(6> 

28F016SA 

28F016SV 

Address Valid to Data 
Valid, tAcc/tAvov (max) 

120 ns 

60 ns 

60 ns 

85 ns 

70 ns 

65 ns 

CE# Valid to Data 
Valid, tDF/tEL qv (max) 

120 ns 

60 ns 

60 ns 

85 ns 

70 ns 

65 ns 

msmrn 

50 ns 

30 ns 

30 ns 

40 ns 

30 ns 

30 ns 

OE# High to Data 
Float, tDF/tGHQz (max) 

30 ns 

20 ns 

20 ns 

30 ns 

25 ns 

25 ns 


Table 2. Write Timing Parameters 


Timing Description 

28F001BX 

28F200BV(2) 

28F400BV(3) 

28F008SA<6) 

28F016SA 

28F016SV 

IHIl'Ill 

50 ns 

50 ns 

50 ns 

40 ns 

50 ns 

40 ns 

mmssm 

50 ns 

50 ns 

50 ns 

40 ns 

50 ns 

40 ns 


50 ns 

50 ns 

50 ns 

40 ns 

50 ns 

45 ns 


10 ns 

10 ns 

10 ns 

5 ns 

10 ns 

10 ns 

HUSO 

50 ns 

10 ns 

10 ns 

30 ns 

30 ns 

15 ns 


NOTES: 


1 . The read and write timings provided in Tables 1 and 2 were taken from the respective component’s datasheet and assume 
a commercial temperature range, 30 pF test load, and Vcc 5V ± 5% for the fastest part available. The 28F001BX is the only 
exception with Vcc ± 10% and a 100 pF test load. 

2. The timings listed in Tables 2 and 3 for the 28F200BV are the same for the 28F002BX, 28F200BX, and 28F002BV. 

3. The timings listed in Tables 2 and 3 for the 28F400BV are the same for the 28F004BX, 28F400BX, and 28F004BV. 

4. The write timing parameters assume WE#-controlled writes. 

5. As can be seen from the preceding tables, the majority of the flash timing parameters are close enough to each other that 
the interface to the Intel386 EX processor will not change much. 

6. In addition to the 28F008SA, Intel also makes a 28F008BV and 28F800BV. These parts are 8-Mbit members of Intel's Boot 
Block Flash memory family and incorporate SmartVoltage technology. However, at the time of publication for this 
document, A/C timing information was unavailable. 
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3.0 READ TIMING ANALYSIS 

The remaining sections of this application note analyze 
the interface between a 25 MHz Intel386 EX CPU and a 
60 ns 28F400BX boot block flash. The procedure used 
to analyze this interface should be used when interfacing 
the Intel386 EX CPU to any Intel flash device. When 
comparing the Intel386 EX CPU parameters to flash, 
this application note will refer to the flash signals names 
CE#, OE# and WE#. However, the Intel386 EX CPU 
respective signals are called CS#, RD# and WR#. Note 
that the Intel386 EX CPU also has a W/R# signal that 
can be used to distinguish between read and write 
cycles. CLK2 refers to the 50 MHz clock that drives the 
Intel386 EX CPU. This clock is internally divided by 
two to make a 25 MHz internal clock for the internal 
peripherals. 


Table 3 provides the memory requirements for a zero 
wait-state read cycle. Unfortunately, the memory 
requirements for a zero wait-state design are too difficult 
for most memory devices to meet. By adding one wait- 
state a 60 ns flash device can successfully interface to 
the Intel386 EX CPU. Table 4 compares the 28F400BX 
parameters to the Intel386 EX CPU parameters in a one 
wait-state design. 

The timings for the 28F400BX listed in Tables 4 and 6 
are the same for the 28F400BV. This application note 
analyzes the interface to the 28F400BX in order to 
address issues with current designs. However, Intel 
recommends that all new designs use the 28F400BV. 
The 28F400BV has SmartVoltage technology enabling 
read capability at 3.3V or 5V, and program/erase 
capability at 5V or 12V. 


Table 3. Read Parameter Time Comparison at Zero Wait-States 


Timing Description 

i386 EX CPU Parameter 

Memory Parameter 

Address Valid to Data Valid 

t 47 = 4CLK2-36 = 44 ns max 

Must Be Less Than 44 ns 

CE# Valid to Data Valid 

t 47 a = 4CLK2-46 = 34 ns max 

Must Be Less Than 34 ns 

OE# Valid to Data Valid 

t 48 = 3CLK2-36 = 24 ns max 

Must Be Less Than 24 ns 

OE# High to Data Float 

t 50 = 1 0 ns max 

Must Be Less Than 1 0 ns 


Table 4. Read Parameter Time Comparison at One Wait-State 


i386 EX CPU Parameter 

28F400BX Parameter^) 

Violated Timing? 

t 4 7 = 44+2CLK2 = 84 max (2) 

tACC = 60 ns Max(i) 

84 >60, No 

t 47 a = 34+2CLK2 = 74 max (2) 

t C E = 60 ns MaxO) 

74 > 60, No 

t 48 = 24+2CLK2 = 64 max (2) 

t 0 E = 30 ns Max CO 

64 >30, No 

t 50 =10 ns max 

tpF = 20 ns Max 

10 < 20, Yes(3) 


NOTES: 

1 . These parameters assume the flash data lines are connected directly to the Intel386 EX CPU. They do not include any 
additional delays due to a buffer. 

2. For every wait-state it is necessary to add 2CLK2 to each parameter dependent on CLK2. 2CLK2 is added to the first three 
parameters for a one wait-state system. 

3. Adding additional wait-states will not fix the toF timing violated. 

4. All Intel386 EX CPU timings were taken from the fourth revision datasheet (order #272420-004). 

5. All 28F400BX timings were taken from the third revision datasheet (order #290451 -003). 
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3.1 Read Timing Solution 

3.1 .1 OE# HIGH TO DATA FLOAT 

Table 4 indicates that OE# high to data float is violated. 
After OE# goes inactive, the 28F400BX takes a 
maximum of 20 ns for its data lines to go to a high 
impedance state. This becomes a problem when the 
Intel386 EX CPU tries to do a write immediately after 
reading from the 28F400BX. This problem is solved by 
either using a buffer to control the bus contention, or by 
making sure your code has a NOP in between every read 
from flash followed by a write. In this example, a buffer 
will be used to address this issue. Section 4.1 details the 
specific implementation of the buffer. Figure 9 shows a 
complete timing diagram for a read followed by a write. 

3.1 .2 DATA READ SETUP TIME 
VERIFICATION 

At 25 MHz, the Intel386 EX CPU requires a min of 7 ns 
of data setup time before the end of the read cycle. The 
end of a one wait-state cycle at 25 MHz is 120 ns. In 
order to meet the read setup time, data must be presented 
to the processor no later than 113 ns into the read cycle. 
The processor provides a valid chip select a max of 
39 ns into the read cycle. The 28F400BX will respond 
with data 60 ns later. Since a buffer is used, 11 ns 
propagation delay (tpLH, max) is added to the 
calculation. This means that data is presented to the 
processor a max of 110 ns (39+60+11) from the 
beginning of the read cycle (see Figure 2). Since this is 
less than 113 ns, the read setup time is met. 

3.1. 2.1 Capacitive Loading 

An access time of 60 ns on the 28F400BX was specified 
with a 30 pF load (see high speed test configuration in 
datasheets). Derating curves for the 28F400BX show 
that at 50 pF the access time only increases by 
approximately 2 ns. Since our example meets the data 
read setup time by 3 ns, a one wait-state read cycle at 
50 pF is still possible to achieve. If the systems 
capacitive loading is higher than 50 pF, a faster buffer 
will be needed in order to achieve a one wait-state 
system. 

3.1 .3 DATA READ HOLD TIME 
VERIFICATION 

The Intel386 EX CPU requires a min of 5 ns of data 
hold time after the end of the read cycle. The 28F400BX 
will hold its data as long as OE#, CE# and the address 
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are active. In this implementation, a PLD turns off the 
buffer’s EN# line as early as 2 ns (tcoi) after the end of 
the read cycle. As long as the buffer has a min tpLZ and a 
min tpHZ of 3 ns or more, the data read hold time will be 
met (see Figure 2). In general, as long as the PLD’s tcoi 
plus the buffers tpLZ or tpnz are at least 5 ns, the data 
read hold time will be met. 

3.1.4 READ SUMMARY 

A one wait-state read cycle is possible with a 60 ns 
28F400BX with loads up to 50 pF by using the given 
implementation. It is advised to use a buffer in order to 
prevent bus contention on read followed by write cycles 
This will fix the flash memory data float delay violation 
(tso). Adding a buffer has other benefits as well. It makes 
the load to the flash data lines smaller for faster read 
performance, and it makes the load to the CPU smaller 
so it can drive more devices. In addition to flash 
memory, typical embedded systems will incorporate 
some SRAM or DRAM. Some RAM is necessary in 
order to do in-circuit programming of flash. The 
Intel386 EX CPU has CMOS inputs so the buffer helps 
the other memory devices drive to these levels. See 
Figure 7 for a complete read timing diagram, and 
Figure 9 for a read followed by write timing diagram. 



Figure 2. Read Setup and Hold Timing 
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4.0 WRITE TIMING ANALYSIS 

Table 5 provides the memory requirements for a zero 
wait-state write cycle. Unfortunately, the memory 
requirements for a zero wait-state design are too difficult 
for most memory devices to meet. Table 6 compares the 
28F400BX parameters to the Intel386 EX parameters in 
a one wait-state design. Section 4.1.2 provides a detailed 
explanation for why two wait-states are required for this 
interface. 



Figure 3. WR# Active/Inactive Timings 


Table 5. Write Parameter Time Comparison at Zero Wait-State 


Timing Description 

1386 EX CPU Parameter 

Memory Parameter 

Address Valid to WE# High 

t 46 +t 4 i = 3CLK2-15 = 45 ns min 

Must Be Less Than 45 ns 

Data Valid to WE# High 

t 43 = 3CLK2-27 = 33 ns min 

Must Be Less Than 33 ns 

WE# Pulse Width 

t 46 = 3CLK2-15 = 45 ns min 

Must Be Less Than 45 ns 

Address Hold from WE# High 

t 42 = 5 ns min 

Must Be Less Than 5 ns 

WE# Pulse Width High 

Implied 20 nsO) min 

Must Be Less Than 20 ns 


NOTE: 


1 . The implied 20 ns comes from the fact that WR# on the Intel386 EX CPU goes inactive from the previous write in phase 1 
of T1 , and goes active for the current write in phase 2 of T1 . At 25 MHz each phase is 20 ns, therefore the WR# pulse high 
time would be 20 ns (See Figure 3 above). 


Table 6. Write Parameter Time Comparison at One Wait-State 


1386 EX CPU Parameter 

28F400BX Parameter 

Violated Timing? 

t 46 +t 4 i = 45+2CLK2 = 85 ns min (2) 

t A s = 50 ns min 

85>50, No 

t 43 = 33+2CLK2 = 73 ns min (2) 

t D s = 50 ns min (i) 

73>50, No 

Ue = 45+2CLK2 = 85 ns min (2) 

twp = 50 ns min 

85>50, No 

t 42 = 5 ns min 

t AH = 1 0 ns min 

5<10, Yes O) 

Implied 20 ns min 

twPH = 1 0 ns min 

20>10, No 


NOTES: 


1 . These parameters assume the flash data lines are connected directly to the Intel386 EX CPU. They do not include any 
additional delays due to a buffer. 

2. For every wait-state it is necessary to add 2CLK2 to each parameter dependent on CLK2. 2CLK2 is added to the first three 
parameters for a one wait-state system. 

3: Adding additional wait-states will not fix the tAH timing violated. 
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4.1 Write Timing Solution 

4.1.1 ADDRESS HOLD FROM WE# HIGH 

Table 6 indicates that address hold from WE# high is 
violated. The 28F400BX requires that the processor hold 
the address 10 ns after WE# goes inactive. The Intel386 
EX CPU only guarantees that it will hold the address for 
5 ns (t42)- This can be fixed by controlling WE# with a 
PLD. If the PLD pulls WE# high at least 5 ns earlier, 
then the problem is solved. 

4.1 .2 DATA VALID TO WE# HIGH AT ONE 
WAIT-STATE 

The section above states that pulling WE# high early 
with a PLD solves the violated write timing. However, 
pulling WE# high early shortens tDS (Data Valid to WE# 
high). If WE# is pulled high too early, tDS will be 
violated. Figure 4 illustrates the timings for WE#. WE# 
is pulled high one CLK2 early by a PLD with a 
minimum propagation delay of 2 ns. With one wait- 
state, this occurs 102 ns into the write cycle. For the 
28F400BX, tos is 50 ns, therefore data has to be valid 
no later than 52 ns into the write cycle (102-50). The 
Intel386 EX CPU places data on the bus as late as 51 ns 


from the beginning of the write cycle (31 ns from the 
middle of Tl). However, in order to avoid bus 
contention on a read followed by write cycle, a buffer 
was added causing additional delays of up to 11 ns in 
worst case (see Section 3.1.1). These additional delays 
cause tDS to be violated in a one wait-state write cycle. 
Since tDS is violated, it becomes necessary to add a 
second wait-state to the write cycle. 

4.1 .3 TWO WAIT-STATE WRITE 

With a second wait-state, the write cycle extends to 
160 ns. WE# still needs to be pulled high one CLK2 
early. With two waits states, this occurs 142 ns into the 
write cycle (see Figure 4). With a tos of 50 ns, data has 
to be valid no later than 92 ns into the write cycle (142- 
50). This leaves plenty of time to meet tDS- 

4.1.4 WRITE SUMMARY 

By controlling WE# with a PLD as implemented above, 
a two wait-state write cycle is achieved. For the Intel386 
EX CPU, these two wait-states could be easily 
programmed using the internal chip-select logic or 
implemented with external ready logic. Ready 
generation is explained in detail in Section 5.2. See 
Figure 8 for a complete write timing diagram. 



PRELIMINARY 


23 





Figure 5. System Block Diagram 


5.0 INTERFACE LOGIC 

This design example will show how to interface the 
Intel386 EX CPU to the 28F400BX with a PLD (22V10) 
and a buffer. Figure 5 shows the basic block diagram of 
the interface. 


5.1 WE# Control 

From the Write Timing Analysis in Section 4.0, address 
hold from WE# high and CE# hold from WE# high are 
the parameters which are violated. These parameters can 
be met by controlling WE# with a PLD as indicated in 
Section 4.1 and Figure 4. WE# is enabled during a write 
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cycle in the middle of the first T2 and is then disabled in 
the middle of the third T2. A complete timing diagram 
illustrating the write cycle is found in Figure 8. The PLD 
equation for WE# is provided in Appendix A. 

5.2 Ready Generation 

In this example, the read cycle requires one wait-state 
and the write cycle requires two. This can be achieved 
by setting the RDY bit in the UCSADL or CSADL 
register and generating READY# with the PLD. Another 
approach would be to use the ready logic built into the 
Intel386 EX CPU chip-select unit. For this approach the 
chip select unit would need to be programmed to 

PRELIMINARY I 










AP-609 



® 


generate two wait-states for both read and write cycles. 
However, since the read cycle only requires one 
wait-state, this is not the optimum solution. For this 
example, a PLD generates one wait-state for a read cycle 
and two wait-states for a write cycle. READY# is also 
brought in as an input and is used to disable the buffer. 
Timing diagrams illustrating READY# generation for 
read and write cycles are provided in Figures 7 and 8 
respectively. The PLD equations for READY# are 
provided in Appendix A. 

5.3 Reset Conditions 


command user interface (CUI) to reset at the same time 
as the CPU, putting the CUI in read array mode. At 
power-up the CUI will default to read array mode. 
However, some designs allow the system to reset while 
the power remains on (reset button). At reset, the CUI 
may not be in read array mode for the CPU to boot, 
therefore it is necessary for the system to reset the CUI 
at the same time as the CPU. Triggering RP# with 
PWRGD ensures that this happens. The second reason is 
to guard against spurious writes. With bus signals in an 
indeterminate state at power-up, connecting PWRGD to 
RP# provides memory protection by masking unwanted 
bus conditions. 


Upon reset, the UCSADL register defaults to FF6FH. 
This means that the Intel386 EX CPU will insert 
15 wait-states and drive READY#. If you are using a 
PLD to drive READY# (like in this example) it is 
necessary to tristate the PLD's READY# to avoid bus 
contention with the CPU's READY#. This can be 
accomplished by sampling LB A#. The Intel386 EX CPU 
will assert LBA# on accesses where it is driving 
READY#. When the PLD samples LBA# active it will 
tristate its READY#. The PLD equation for tristating 
READY# is provided in Appendix A. 

For the interface implemented in Figure 5, PWRGD 
(power good) is the signal that indicates to the PLD to 
RESET the CPU. It is also important to connect 
PWRGD to RP# (reset/power-down) on the flash device 
for two reasons. First, it is important for the flash 


5.4 Buffer Control 

The 28F400BX data float time is longer than the 
allowable limit specified in the Intel386 EX CPU 
datasheets. One solution to this problem is to add a 
buffer. In this implementation, a PLD controls the 
enabling of the buffer. For a write, the buffer is enabled 
in the middle of the first T2 and then is disabled at the 
end of the third T2 (see Figure 6 below). For a read, the 
buffer is enabled in the middle of the first T2 and is 
disabled at the end of the second T2. The direction of 
the buffer is controlled by the Intel386 EX CPU RD# 
signal (see Figure 5). A complete timing diagram 
illustrating the buffers enable and disable during a read 
followed by write cycle is found in Figure 9. The PLD 
equation for EN# is provided in Appendix A. 
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6.0 READ TIMING DIAGRAM 


inlel 



NOTE: 

The processor puts the address and W/R# on the bus a max of 29 ns from the beginning of T1 . CS# goes active a max of 
39 ns from the beginning of T1 . The PLD samples W/R# in the middle of the first T2 and enables the buffer. Data from the 
28F400BX is guaranteed 60 ns after CS# is active. Since the buffer has a max delay of 1 1 ns, data will be on the data bus a 
max of 1 10 ns from the beginning of T1 . This gives 10 ns of setup time before the data is latched. In this example, the PLD 
could disable the buffer as soon as 2 ns after the data is latched. With 3 ns of tpHz and tpLz for the buffer, data will hold for a 
minimum of 5 ns after it is latched. 


Figure 7. Read Timings for the Interface 
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7.0 WRITE TIMING DIAGRAM 



NOTE: 

The processor puts the address and W/R# on the bus a max of 29 ns from the beginning of T1 . CS# goes active a max of 
39 ns from the beginning of T1. The PLD samples W/R# in the middle of the first T2 (60 ns into the write cycle) and enables 
WE# as well as the buffer. The PLD enables the buffer a max of 8 ns from the middle of the first T2. The buffer has a max tpHz 
and tpLZ of 1 1 ns, therefore data will be presented to the 28F400BX a max of 79 ns into the write cycle (60+8+1 1). WE# is 
pulled high as early as 2 ns from the middle of the third T2 (142 ns into the write cycle). This yields a min of 64 ns (142-79) of 
data setup to WE# high. 


Figure 8. Write Timings for the Interface 
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8.0 READ FOLLOWED BY WRITE TIMING DIAGRAM 



2160_09 

NOTE: 

At the end of the read cycle the 28F400BX requires a max of 20 ns from RD# high to go to a high impedance state. If the next 
bus cycle is a write, the processor will drive data on to the bus. This causes the potential for bus contention and can be seen in 
the figure by the overlap of Flash D[0:15] with CPU D[0:15]. A solution to this problem is to turn off the buffer during this period 
of overlap. This allows the 28F400BX to float its data lines, and allows the processor to drive the data bus without contention. 


Figure 9. Read Followed by Write Timing Cycles 
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9.0 ADDITIONAL INFORMATION 


9.1 References 


Order 

Number 

Title 

272420 

Intel386™ EX Embedded Microprocessor Datasheet 

290406 

28F001 BX 1 -Mbit Boot Block Flash Memory Datasheet 

290429 

28F008SA 8-Mbit FlashFile™ Memory Datasheet 

290448 

28F200BX, 28F002BX 2-Mbit Boot Block Flash Memory Family Datasheet 

290451 

28F400BX, 28F004BX 4-Mbit Boot Block Flash Memory Family Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Family 

290530 

4-Mbit SmartVoltage Boot Block Flash Memory Family 

290539 

8-Mbit SmartVoltage Boot Block Flash Memory Family 

290489 

28F016SA 16-Mbit FlashFile™ Memory Datasheet 

290528 

28F01 6SV 1 6-Mbit FlashFile™ Memory Datasheet 

272425 

AP-499, “Introducing Intel’s Family of Embedded Intel386™ Microprocessors” 

292163 

AP-610, “Flash Memory In-System Code and Data Update Techniques” 
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APPENDIX A 
PLD EQUATIONS 


*These PLD equation are posted on the BBS under EXFLASH.ZIP 


TITLE 

PATTERN 

REVISION 

AUTHOR 

COMPANY 

DATE 


MEMORY INTERFACE 

PDS 

2.0 

TONY SHABERMAN 

INTEL 

1/20/95 


This design has not been verified, it is sample code only. 

Intel assumes no responsibility for any errors which may appear 

in this code. This PLD performs the functions necessary for interfacing 

the Intel386™ EX CPU to the 28F400BX. It controls WE# to the 28F400BX, 

EN# to the buffer, READY# and RESET to the processor. 

NOTES: 

T2_l will go active for the first half of the first T2 on all cycles (1 clk2). 

T2_l will stay active for the second half of T2 if CS# is active. It is 
necessary to place CS# at the second half of the equation because CS# has a 
39 ns max valid delay (1 ns before the first half of the equation is sampled). 

T2_2 will go active for the duration of the second T2 under the condition 
that the second half of T2_l was generated 

T2_3 will go active for the duration of the third T2 under the conditions 
that the second half of T2_2 was generated and it is a write cycle 

EN will go active in the middle of the first T2 if CS# is active. EN is 
disabled either by the CPU or the PLD driving RDY_I#. Since the CPU could 
drive RDY_I# early in the last T2, a third term (EN and PHI) is added to the 
equation to ensure that the buffer stays active during the second half of 
the last T2. 

READY# is represented by two pins, RDY_I# (ready in) and RDY_0# (ready out). 
When booting from flash, the CPU will drive RDY_I# so the PLD must tristate 
its RDY_0#. Some PLD devices support a pin feedback feature which would 
eliminate the need for using two pins. 
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CHIP MEMORY_INTERFACE iPLD22V10 


; INPUTS 

PIN 2 

CLK2 

PIN 

PWRGD 

PIN 

W R 

PIN 

/ADS 

PIN 

/CS 

PIN 

/LBA 

PIN 

/RDY I 


2X INPUT CLOCK (50 MHZ) 

POWER GOOD USED TO GENERATE RESET TO CPU 

FROM CPU W/R# SIGNAL 

FROM CPU ADS# SIGNAL 

FROM CPU CS# SIGNAL 

FROM CPU LBA# SIGNAL 

FROM CPU READY# SIGNAL AND PLD RDY_0# SIGNAL 


; OUTPUTS 
PIN /WE 
PIN /EN 
PIN /RDY_0 
PIN RESET 


TO FLASH WE# SIGNAL 

TO BUFFEROUTPUT ENABLE SIGNAL 

TO CPU READY# SIGNAL AND PLD RDY_I SIGNAL 

TO CPU RESET SIGNAL 


; NODES 
NODE PHI 
NODE T2_l 
NODE T2_2 
NODE T2_3 


MATCHES CPU PHI, USED FOR TIMING 
ACTIVE DURING FIRST T2, USED FOR TIMING 
ACTIVE DURING SECOND T2, USED FOR TIMING 
ACTIVE DURING THIRD T2, USED FOR TIMING 


EQUATIONS 


RESET :=/PWRGD 
PHI :=(/PHl */RESET) 

T2_l :=(/PHl * ADS)+(PH1 *T2_1 *CS) 
T2_2:=(/PH1 *T2_1)+(PH1 *T2_2) 
T2_3:=(/PH1 *T2_2* W_R)+(PH 1 *T2_3) 


PHI SYNCS BY RESET 

T2_l ACTIVE FOR 2 CLK2 CYCLES AFTER ADS# 
T2_2 ACTIVE FOR 2 CLK2 CYCLES AFTER T2_l 
T2_3 ACTIVE FOR 2 CLK2 CYCLES AFTER T2_2 


WE:=W_R*(T2_1+T2_2) 

EN:= CS*(T2_1+(EN*/RDY_I)+(EN*PH1)): 
RDY_0 :=(W_R*T2_3) 

+(/W_R*T2_2) 

RDY O.TRST=/LBA 


WE ACTIVE FROM MIDDLE OF T2_l TIL MIDDLE OF T2_3 
EN ACTIVE UNTIL READY 
2 WAIT STATE READY GENERATION FOR WRITE 
1 WAIT STATE READY GENERATION FOR READ 
RDY_0 TRISTATED WHEN LBA# IS ACTIVE (CPU 
GENERATING RESET) 


SIMULATION 

TRACE_ON CLK2 PHI PWRGD RESET LBA T2_l T2_2 T2_3 ADS CS WE EN RDY_0 RDY_I 
SETF CLK2 /PWRGD /ADS /CS /LBA /RDY_I 
PRLDF /PHI /T2_l /T2_2 /T2_3 
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CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
SETFPWRGD 
CLOCKF CLK2 
CLOCKF CLK2 
SETF ADS AV_R CS 
CLOCKF CLK2 
CLOCKF CLK2 
SETF /ADS LB A 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
SETF RDY_I 
CLOCKF CLK2 
CLOCKF CLK2 
SETF /CS /LB A /RDY_I 
CLOCKF CLK2 
CLOCKF CLK2 
SETF ADS W_R CS 
CLOCKF CLK2 
CLOCKF CLK2 
SETF /ADS 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
SETFRDYJ 
CLOCKF CLK2 
SETF/CS 
CLOCKF CLK2 
SETF/RDYJ 
CLOCKF CLK2 
SETF CS ADS /W_R 
CLOCKF CLK2 
CLOCKF CLK2 
SETF /ADS 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 
SETFRDYJ 
CLOCKF CLK2 
CLOCKF CLK2 
SETF/RDYJ 
CLOCKF CLK2 
CLOCKF CLK2 
CLOCKF CLK2 

TRACE.OFF 
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APPENDIX B 

PLDShell Plus* WAVEFORM 


Booting from 28F400BX . 

(only 3 of 1 5 wait states shown) 


2 Wait State 
Write Cycle 


1 Wait State 
Read Cycle 


I T1 I T2 I T2 I T2 I T2 I Ti I T1 I T2 I T2 I T2 I Ti I T1 I T2 | T2 | Ti | Ti 

clk2 liinnnjiniijrijuirijinjinjin^^ 


1 . This waveform was exported from PLDShell PLUS*. The waveform files are included on the BBS under EXFLASH.ZIP. 

The T-state annotation was added and is not normally included with the PLDshell PLUS waveform. 

2. PHI is generated by the PLD and is used instead of PH2 for consistency with the EV386EX evalution board. PHI is simply 
the inverse of the PH2 as seen in all the previous figures. 

3. T2_1 , T2_2, and T2_3 are used to provide timing for WE# and RDY_0# generation. When booting from the 28F400BX the 
Intel386 EX CPU drives READY# so T2_1 and T2_2 are not needed. However, they are still be generated and can be 
ignored. 

4. For this simulation, CLK2, PWRGD, LBA#, ADS#, CS#, and RDYJ# are all forced inputs. 


PLDShell PLUS* Waveform 
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APPENDIX C 

SAMPLE MEMORY REQUIREMENT 
CALCULATIONS 


This spreadsheet is posted on the Intel Application 
Support BBS @ 916-356-3600. The filename is 
EXFLASH.ZIP and it is located in the E3X\REF_DSGN 
section. 


The flash memory timing specs must lie within the 
minimum and maximum specs given below for a desired 
wait-state performance. However, these calculations do 
not take into account the delays due to needed glue logic 
or buffers and assume a non-pipelined interface. 


Memory Requirements for the inte!386 EX Microprocessor 


Read Specs 

16 MHz 

20 MHz 

25 MHz 

0 WS 

1 WS 

2 WS 

OWS 

1 WS 

2 WS 

OWS 

1 WS 

2 WS 

a 

Address Valid 
to Data Valid 

Max 

74 

137 

199 

53 

103 

153 

44 

84 

124 

jf 

E9h 

CE# Valid to 
Data Valid 

Max 

64 

127 

189 

46 

93 

143 

34 

74 

114 

ESH 

OE# Valid to 
Data Valid 

Min 

43 

105 

168 

30 

70 

80 

24 

64 

104 

rm 

OE# High to 
Output HighZ 

Max 

18 

18 

18 

15 

15 

15 

10 

10 

10 

Write Specs 










tAVWH 

tAS 

Address Valid 
to WE# High 

Min 

79 

141 

204 

60 

110 

160 

45 

85 

125 

tDVWH 

tDS 

Data Valid to 
WE# High 

Min 

54 

116 

179 

39 

89 

139 

33 

73 

113 

tWLWH 

twp 

WE# Pulse 
Width 

Min 

79 

141 

204 

60 

110 

160 

45 

85 

125 

tWHAX 

tAH 

Address Hold 
from WE# 
High 

Min 

5 

5 

5 

i 

5 

5 

5 

5 

5 

5 

tWHWL 

twPH 

WE# Pulse 
Width High 

Min 

31 

31 

31 

25 

25 

25 

20 

20 

20 
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1.0 INTRODUCTION 

Today’s PC can perform a myriad of functions, perhaps 
far more than the original designers of the PC ever 
envisioned. The number of software packages available 
for mass consumption is staggering, and more are being 
unveiled each year. Multimedia has enabled the PC to 
invade every nook and cranny of the home. The number 
of systems being purchased with CD-ROMS, sound 
cards, and graphics accelerators is growing at a 
phenomenal rate. The demand for additional hardware 
has led to an unprecedented craze for add-in cards and 
peripherals. While all this growth has been a tremendous 
boon, it has had its downside as well. The PC has 
become so sophisticated that new bus structures have 
been defined, new protocols have been introduced and 
new system configurations have emerged. All these 
changes have made an already complex tool more 
difficult to use by the PC user. 

With the advent of Plug and Play (PnP), it seems a 
solution is in sight. Simply put, Plug and Play is a way 
of adding new features to a system without the usual 
headaches — like reconfiguring switches and jumpers, 
updating system configuration files or other frustrating 
things. PnP enables a system to automatically configure 
system components, peripherals and add-in devices just 
prior to boot time. The basic input/output system (BIOS) 
of PnP is responsible for the majority of the auto- 
configuration of the system. 

With its previous history of changes and the obvious 
future changes that will take place as a result of PnP, it 
only makes sense to store the BIOS on a medium that 
allows the most flexible means of updating, while 
maintaining a high level of reliability. Of course, all this 
has to be accomplished without adding to system costs 
or making it more difficult for the PC user to get their 
work done. A PnP BIOS based on Intel’s boot block 
flash meets all of these demands and more. The PnP 
Specification, for instance, requires nonvolatile storage 
for old bus standards; the parameter blocks of the boot 
block flash were designed for such a function. As far as 
recovery code is concerned, the hardware-lockable boot 
block area of the boot block flash memory provides 
unparalleled data protection and guarantees system 
recovery. The inherent updateability of the boot block 
flash memory, while in-system, reduces cost by 
^importing easy code changes and eliminating sockets. 


This applicati^ 5 ; ^pethodology for 

implementing a flash memory PnP BIOS using Inters 
boot block flash. Emphasis is placed on PnP 
requirements, hardware, and software considerations. 
Section 2 discusses the current BIOS paradigm and its 
future. Section 3 provides an understanding of the Ping 
and Play architecture. Section 4 gives a high-level 
overview of the boot block products. Section 5 discusses 
the implementation while Section 6 looks at alternative 
solutions. fl||; 


2.0 BENEFITS OF A PNP BOOT 
BLOCK FLASH BIOS 

Perhaps you are wondering why flash is the medium of 
choice advocated in this application note as the means 
for storing system BIOS, particularly for Plug and Play? 
From a PC user’s perspective, a PnP flash BIOS enables 
users to install new hardware without having to call the 
support number. This translates to ease-of-use: 

® Easily updatable code assuring optimal BIOS 
performance 

o No need to edit the CONFIG.SYS file. 

o No need to determine system type and match, 
somehow, to jumper settings. 

• No need to investigate available system resources 
and muddle through reassigning them. 

• No need to fiddle with system memory reallocation. 

• No need to buy a new system every time something 
changes (increases system’s useful lifespan). 

Plug and Play can make the usual experience of adding 
new functionality to an existing system as easy as: 

1. Turn the system off. 

2. Insert the new device. 

3. Turn the system on. 

PnP flash BIOS can also extend the life of the PC. By 
enabling simple updates to the BIOS (simply insert the 
upgrade disk and the software programs the new BIOS), 
the user can get more out of their PC investment. 
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From an OEM or system manufacturer’s standpoint, a 
PnP flash BIOS enables the following benefits: 

• Eliminates the need for excessive EPROM 
inventories. 

• Reduces the need for sockets since flash can be 
soldered onto the motherboard and updated in- 
system 

• Minimizes system chip count and system cost. 

• Reduces support costs. 

• Improves end-user perception of product 
upgradeability and ease-of-use. 

When new features are added to the BIOS, a simple disk 
sent to the user or a connection to an on-line network is 
all it takes for the user to achieve the upgrade. This has 
one very important benefit for the OEM/manufacturer — 
it strengthens user faith in the product (and its 
manufacturer) and enhances their perception of the 
product’s ease-of-use — which can be a great 

differentiation. Additionally, since each user no longer 
needs to call the technical support line as often, this 
costly overhead can be reduced, saving even more 
money. 

All these benefits are a result of the capabilities that a 
flash PnP BIOS enables. Looking back to the original 
PC, it was a fairly simple machine (by today’s 
standards) with simple code designed to perform 
computational math functions, database creation and 
management, and word processing. Even though the 


BIOS code was elementary, few people understood it (or 
needed to). Since that time, the PC BIOS l2s (and will) 
continued to evolve in order to accommodate the 
growing needs of the PC user. 


2.1 The Old BIOS Paradigm 

In the original PC architecture, the BIOS code was fairly 
straightforward and required little memory space — about 
32 KB total. BIOS code provided the lowest-level of 
interface between the operating system and the 
hardware. It was located at the top of memory for the 
8088 system (the original PC had a memory limit of 
1 MB). Even though only 32 KB were required, the PC 
designers knew the benefit of “breathing room” and, 
with great foresight, reserved a total of 128 KB (from 
hex address EOOOOh to FFFFFh) for BIOS code storage, 
as shown in Figure 1. When the AT was launched in 
1984, its BIOS functions were extended by another 
32 KB, making a total of 64 KB. 

However, the introduction of BIOS created a crutch that 
has been integrated into the PC: every new system 
hardware component that was not already supported in 
the BIOS required a new BIOS to be generated, or at 
least an upgrade of the existing BIOS. This meant OEMs 
and system manufacturers needed to keep abundant 
quantities of ROMs and EPROMs handy to 
accommodate new BIOS versions. This was a 
cumbersome and expensive solution, but it was soon 
accepted as the norm. And, as long as the frequency of 
change to the BIOS remained minimal, this solution was 
adequate. 
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28F001 B-T 
Boot Block Flash 

Boot Code 


FFFFFm 


FOOQOh I 


gOOOOh 


4 kb BIOS Parameters 
4 kb Configuration Utilities AOOQ'Oh 


Main BIOS Code, 
Runtime Services, 
Drivers, etc. 


1 MB DOS Memory Map 

BIOS Code 
(64 KB) 

Additional 
BIOS Space 
(64 KB) 

Adapter and 
Graphic Space 
(256 KB) 


0O5OOh 


User Area 
(638.75 KB) 

BIOS Data Area 
(256 Bytes) 

BIOS Stack Area 
(256 Bytes) 
Interrupt Vector Table 
(768 Bytes) 


28F002B-T 
Boot Block Flash 

Boot Code 16 KB 

BIOS Parameters 8 KB 

Configuration Utilities 8 KB 

Additional BIOS 

Services 96 KB 


Main BIOS Code, 
Runtime Services, 
Drivers, etc. 


Figure 1. Possible BIOS Segmentations Using Flash Components (1-Mbit or 2-Mbit) 


2.2 Beyond the 128 KB Limit 

Since then, BIOS code has undergone continual 
development, including the addition of custom features 
to enhance system flexibility and more complex set-up 
routines. Today’s BIOS includes support for previously 
“advanced” features such as system configuration 
analysis (diagnostics), power management, networking 
capability and I/O support for devices with extremely 
high transfer rates. This expansion continued until the 
AT BIOS eventually consumed the entire reserved BIOS 
space— all 128 KB! 

So now what? With the definition of new bus 
specifications (EISA, VL, PCI, to name a few) and the 
further proliferation of features such as ROM versions of 
application software and enhanced video BIOS, the 
potential for future BIOS changes looms larger than 
ever, and the frequency of change seems no less 
daunting. A further look at the 1-MB memory map of 
the PC indicates that BIOS needs to prepare for more 
change and remain open-minded about the future (and it 
would not hurt any if the BIOS acquired more memory 


space cither — but this would mean changing the 
architecture of the standard PC). 

Today, PnP BIOS requirements may extend beyond 
128 KB. A standard system BIOS consumes roughly 
64 KB; PnP support is another 12 KB; automatic power 
management support adds 2 to 10 KB; PCI (Peripheral 
Components Interconnect) extensions hoard some 
20 KB of the BIOS; and on-board VGA (Video Graphics 
Adapter) controllers utilize an extra 30 KB to 40 KB of 
space. The potential size of the BIOS for such a system 
is almost 150 KB. Since new developments for the PC 
show no signs of abatement, it seems clear that a means 
of updating as well as expanding BIOS quickly and 
easily has become a necessity. Plug and Play is only one 
of the many technologies that can be implemented better 
with flash. As users realize the benefits of PnP, the 
demand generated will drive the number of Plug and 
Play systems upward. 
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3.0 PLUG AND PLAY 

The Plug and Play architecture is intended to alleviate 
configuration woes and provide the end-user with an 
easy means of expanding the capability of their PC. To 
support PnP, several new components need to be added 
to the host system and add-in cards. For instance, a new 
type of add-in card capable of auto-configuration is 
required. Additionally, system firmware and software is 
necessary to supervise the allocation of system resources 
and carry out the configuration of these new add-in 
cards. For widespread acceptance, PnP has to support all 
the major bus structures. PnP executes on the PCI bus by 
design. The PnP-ISA extensions enable Plug and Play 
functionality on the ISA bus while maintaining support 
for traditional (non-PnP) add-in cards — affectionately 
referred to as legacy devices. All systems that claim PnP 
support must recognize the existence of legacy devices 
and auto-configure new PnP devices around these static 
devices. On-going development will soon qualify Plug 
and Play on the VL, EISA and MCA bus structures as 
well as the PCMCIA interface. 


3.1 PnP Components 

For a system to be fully PnP-compliant, four basic 
elements are required: 

1. System/PnP BIOS 

2. PnP operating system 

3. PnP hardware devices 

4. PnP application software 


While waiting for full-featured PnP operating systems 
like Windows* 95, Windows NT and PnP versions of 
OS/2*, solutions are available from individual vendors, 
including Phoenix Technologies*, SystemSoft* and 
Intel. In addition, the requirements for PnP 
implementation vary slightly depending on which bus 
architecture is being utilized. Even though Plug and Play 
is an extension of the emerging PCI bus definition, it 
will revolutionize standard buses like ISA and EISA by 
making them more user-friendly. The software 
architecture for supporting PnP consists of the following 
components (see Figure 2): 

1. Platform BIOS: interfaces to the PnP BIOS 
Extensions block; provides error reporting, buffer 
allocation and platform-specific configuration; 
provides ESCD interface. 

2. PnP BIOS Extensions : auto-configures PCI cards, 
add-in cards, and system board devices during 
power-up as part of the power-on self test (POST) 
procedure; provides run-time support to system. 

3 Extended System Configuration Data (ESCD): a data 
structure designed to store configuration information 
for all system devices, including the last working 
system configuration; the ESCD mmi be stored in a 
nonvolatile area, 



Applications 

O/S 

Configuration 

Software 

Drivers 

BIOS 
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Figure 2. Plug and Play Software Architecture Components. 

Note the many layers that depend on the ESCD. The parameter blocks of the boot block 
flash memory enable this nonvolatile storage capability of Plug and Play. 


The following components are operating system 
dependent: 

4. Configuration Manager (CM): a DOS/Win device 
driver that auto-configures any ISA add-in cards not 
configured by the PnP BIOS Extensions during 
POST; provides other device drivers and PnP-aware 
applications like the ICU access to configuration 
information for all system devices (two VxDs 
provide similar access privileges to PnP-aware 
drivers and applications running under windows); 
provides interfaces for PCMCIA software to get 
configuration data, but does not provide 
configuration services. 

5. ISA Configuration Utility ( ICU )*: a utility designed 
to assist users in selecting conflict-free 


1 The Intel PnP Kit R1.21 and R1.23 update include 
both DOS and Windows versions of the ICU (release 
R1.3 and R1.4 are Windows only at this time. Other 
configuration kits are also available: SystemSoft offers 
PnPView and Phoenix Technologies offers Phoenix 
System Essential. 


configurations for legacy ISA add-in cards; advises 
end-users on resource settings and saves this new 
information into the extended system configuration 
data (ESCD) for future use by PnP BIOS Extensions 
or the CM; supports manual configuration of PnP 
devices. (Caution: it is best to know what you are 
doing before embarking down this road — advanced 
users haven.) 

Of the components listed above, the platform BIOS, PnP 
BIOS extensions, and ESCD are the system critical 
portions without which PnP support would be 
incomplete. The configuration manager and the ISA 
configuration utility provide functionality that may be 
incorporated into the firmware of the operating system. 
The PnP BIOS and the ESCD are the components that 
initialize the system when power is applied. 

3.2 PnP Functionality 

As already mentioned, the PnP BIOS is an essential part 
of the PnP system. The traditional system BIOS does not 
address resource management. Its knowledge is limited 
to hard-wired devices, only. In a PnP environment, the 
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system BIOS knows what resources are being used by 
system board devices and peripherals. During POST, the 
system BIOS communicates this information to the PnP 
BIOS, which then detects any PnP hardware devices and 
initializes them. PnP BIOS also adds the capability of 
runtime configuration; the system can now dynamically 
change the resources allocated to system board devices 
and add-in peripherals (if they have been so designed) 
after the operating system has been loaded. Working in 
tandem with the existing system BIOS, the PnP BIOS 
can detect newly installed devices during the POST and 
communicate this information to the system at runtime 
(see Figure 3). 

Furthermore, the PnP BIOS is capable of event 
management. Through its event management interfaces, 
the PnP BIOS can alert the system about new devices, 
like a notebook docking station, added or removed 
during runtime. 

The POST procedure of the PnP BIOS identifies, tests, 
and configures the system before passing control to the 
operating system. The POST process must maintain 
previous POST compatibility, configure all legacy 
devices known to the PnP BIOS, arbitrate resources, 
initialize the IPL (Initial Program Load— this is how the 
operating system is launched), and support both PnP and 
non-PnP operating systems. Upon completion of the 
POST process, the BIOS attempts to have all necessary 
system devices initialized and enabled before the 
operating system is loaded; the PnP BIOS aspires further 
to provide the operating system a conflict-free 
environment in which to boot. 

The key to a conflict-free operating environment is 
effective management of system resources; 
unfortunately there is no definitive directive on how 
system resources should be allocated. The firmware of 
most devices does not contain information on how much 
memory the device will need. Even if this knowledge 
was available, there is no consistent way of extracting 
this information. The PnP BIOS Specification identifies 
three methods for attaining effective resource 
management: static resource allocation, dynamic 

resource allocation, and combined resource allocation. 
The choice of which is used depends on the devices that 
are being supported by the system. 

• Static Resource Allocation : This method advocates 
the allocation of system resources based on the Last 
Working Configuration (LWC) and is best for 
systems that have many legacy or static devices that 
must be resourced. As its name implies, the resource 
allocation for all configurable devices is 
predetermined and fixed. This information on the 
specific resources assigned to all configurable 


devices must be stored in some nonvolatile location 
until needed. The ESCD is the structure specified for 
storing this information. The ESCD in this allocation 
scheme requires updateability (in case a new device 
is added and the resource allocations have to be 
adjusted) and nonvolatility (so the information is 
always available to the system BIOS during POST). 
As long as new devices are not added, or previous 
ones removed, conflict detection and resolution 
(CDR) is not necessary and the LWC is used at each 
boot. However, the capability to perform CDR must 
be available when it is needed. 

• Dynamic Resource Allocation : This approach 

assumes that all PnP devices know exactly how 
much space they will require and what resources will 
be needed. This approach is best suited for systems 
with few static devices or a system whose 
configuration changes frequently. A complete 
knowledge of which legacy devices are being used 
and what resources they consume is necessary to 
insure true conflict-free operation. The legacy device 
information (and any locked PnP card configuration) 
should be stored in nonvolatile memory. The 
principle benefits of this approach are its minimal 
nonvolatile memory requirements and the flexibility 
of support for PnP devices. Each boot could 
potentially yield a different configuration and PnP 
devices could be added or removed without changing 
the legacy information in the ESCD. The CDR 
algorithm will run each time a new system 
configuration has to be determined. 

• Combined Static and Dynamic Resource Allocation : 
This method bases resource allocation on the last 
working configuration (stored in the ESCD) and also 
probes other devices, whose information is not 
contained in the ESCD, for their resource needs. A 
balanced environment is the primary target for this 
type of allocation. The system dynamically caters to 
its new requirements, shuffling previous resource 
assignments as necessary to satisfy as many devices 
as possible. Once a new conflict-free environment is 
established, the system updates the ESCD with the 
new configuration and checks against this new 
information during the next boot or system reset. As 
with the dynamic scheme, every new system 
configuration that must be determined requires some 
kind of CDR algorithm in order to insure a conflict- 
free operating environment. 
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Non-PnP BIOS ISA Configuration 


PnP BIOS ISA Configuration 



Figure 3. Possible PnP/Non-PnP BIOS ISA Add-In Card Configuration Flow. Note the importance of 
the ESCD in the Plug and Play Configuration Flow 


Without an ESCD, the PnP BIOS must perform resource 
allocation as well as conflict detection and resolution 
each and every time the system is booted, and any 
locking of devices must be done by the supporting PnP 
operating system. Although the need for nonvolatile 


storage cannot be disputed, the amount of storage 
required depends on whether or not the PnP system 
needs real time updates. Ultimately, it will be decided 
by the methodology selected for resource management. 
A static or dynamic allocation scheme requires a fixed 
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amount of nonvolatile memory for the ESCD and other 
BIOS parameters. A combined scheme for allocation 
constantly adds or removes from the ESCD data 
structure. Other parameters may need to be updated as a 
result. Regardless of the storage method chosen, the 
BIOS must know how to resolve any untimely 
interruption of a crucial system or BIOS function. The 
underlying mechanism for appeasing all these 
requirements is flash, and Intel’s boot block flash is the 
solution for today’s demands and tomorrow’s 
inclinations. 


3.3 wmmmmm & Bitmap 
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contain the detailed information needed for full Plug and 
Play support. For instance, you could not utilize the 
robust allocation algorithms of the operating system 
with a bitmap structure. In addition to not supporting 
locking, the bitmap structure ilso does not allow device 
enabling and disabling, which is essential for disabling 
PnP devices In nort-PnP environments. 


4.0 INTEL’S BOOT BLOCK: THE 
PNP FLASH BIOS SOLUTION 

With the background information on Plug and Play 
explained in the previous sections, a full analysis of the 
Intel boot block and how it meets the needs of Plug and 
Play follows. Included are a description of the boot 
block family of products, how they meet the PnP 
requirements, and a hardware design example. 

The Intel boot block (BB) flash memory products are 
particularly well suited for BIOS applications. Boot 
block flash is segmented into a lockable boot block, two 
parameter blocks and one or more main blocks. All boot 
block devices are manufactured on Intel’s ETOX™ flash 


memory process technology. An on-chip Write State 
Machine (WSM) provides automated program and erase 
algorithms with an SRAM-compatible write interface. 
The key feature of the boot block architecture that 
differentiates it from other flash memories is its 
hardware-lockable boot block, which allows system 
recovery from fatal crashes. Additional features of boot 
block flash include: 

• Hardware write protection via pin 

• Hardware locking of boot block 

• Hardware pin for system reset during write 

• High performance reads (for speedy access to data) 

• Deep power-down mode (a key feature for “green” 
PCs) 

• Extended cycling capability (100,000 block/erase 
cycles) 

Armed with this impressive array of features, Intel’s 
boot block flash memory tackles the PnP BIOS 
challenge and prevails with a winning solution. Boot 
block flash memory meets the needs of the Plug and 
Play BIOS, the PnP data storage area (ESCD), and the 
PnP BIOS boot code. 

The main block(s) of the boot block flash can be used to 
house PnP BIOS code. This code will doubtless include 
the standard AT BIOS code (all 64 Kbytes) as well as 
the PnP specific additions to the standard BIOS, an extra 
10 Kbytes-20 Kbytes. Any additional features that 
particular OEMs or vendors wish to implement 
(i.e., power management, virus protection, PCI, etc.) will 
exhaust more memory. The main block of the 1-Mb boot 
block is 112 KB; the 2-Mb has one 96-KB main block 
and one 128-KB block. The 4-Mb boot block is similar 
to the 2-Mb except it has three 128-KB main blocks. 
The choice of which boot block to use depends on BIOS 
specifications and other system requirements. For some 
systems, the 1-Mb boot block is sufficient. However, 
other systems have advanced features that require more 
memory, for example 

• Improved help files 

• System diagnostics code 

• Foreign language support 

• Integrated SCSI subsystems 

For these applications, a 2-Mb boot block is the prudent 
choice. With twice the memory space as the standard PC 
memory map allots to BIOS, the 2-Mb boot block flash 
offers plenty of head room — just what a growing PC 
needs. 
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The previous section touched on some of the methods 
available for resource management and the amount of 
nonvolatile memory necessary for each approach. Boot 
block flash solves the issue of the ESCD for each of the 
possible allocation schemes. 

The static allocation scheme stores the resource 
requirements for all system and add-in devices within 
the ESCD. These system configurations can be 
programmed into one of the parameter blocks of the 
boot block flash as the ESCD. Parameter blocks are 
either 4 KB (1-Mb boot block flash) or 8 KB (2-Mb and 
4-Mb boot block flash) in size. The ESCD Specification 
calls for 4 KB of nonvolatile memory for the ESCD. Of 
course, an OEM may elect to define its own version of 
the ESCD, but that structure will still need to be stored 
in some nonvolatile location. If the OEM or system 
manufacturer decides to include additional features 
within the ESCD (or keep a second copy of the ESCD 
for recovery purposes), the other parameter block can 
certainly be used for this purpose. 

With dynamic resource allocation, the boot block 
architecture’s parameter block is an excellent choice for 
storing the resource information of legacy devices. 
When systems are being put together, all devices on that 
system can be pre-assigned specific resources and this 
information is saved into the ESCD. This implies that 
some conflict resolution protocol or intelligent 
allocation algorithm needs to be implemented to assign 
resources to any devices added to the system by the end- 
user. This protocol can be included in the BIOS or as 
part of the operating system. 

For the combined approach, the dual parameter blocks 
of the boot block family again come into play. Using 
this feature of the boot block architecture, two versions 
of working system configurations can be saved. This 
means that the last two working configurations are 
always available to the system, further insuring recovery 
in case of irreconcilable conflicts. If this is not desired, 
then the ESCD can be written alternatively to each 
parameter block, thereby minimizing the number of 
writes to the same location and extending the life of the 
flash component. 

Finally, the hardware-lockable boot block of the flash 
architecture is ideal for BIOS boot code. The boot code 
is the first piece of code executed each and every time 
the system is turned on or rebooted. Boot code consists 
of a jump vector, checksum routine and recovery code. 
The jump vector, which is 16 bytes long, is the 
beginning address of the main BIOS. This is the address 
jumped to after the checksum routine returns a valid 
checksum, indicating that the current BIOS is good. If 
the checksum routine does not validate the goodness of 


the available BIOS, the recovery code is then used to 
load a new BIOS. 

In the AT system, the boot code was usually no more 
than 8 KB in size. However, the improvements made to 
start-up routines, checksum routines and recovery code 
to keep up with the constantly changing times have 
forced this boot code to grown outside of its intended 
limit. Further PC enhancements will advance rather than 
curb this growth. The boot block area of the 1-Mb flash, 
with its 8 KB size, is the consummate solution for 
storage of the standard boot code. The 16 KB size of the 
2-Mb and 4-Mb boot block is the answer to the growing 
needs of today, and the unyielding promise of tomorrow, 
by enabling the boot code to expand beyond itself to 
better serve the user. 

Since this boot code is so important to the operation of 
the system, it is easy to understand why it needs to be 
protected. Storing it within the hardware locked boot 
block provides maximum protection to the system. If a 
reset occurs during reprogramming of the flash, for 
instance (the dog has been known to run over the power 
cord at the most inopportune times), a hardware-locked 
boot code means that system recovery is not only 
possible, it is guaranteed! This capability is an asset to 
OEMs users alike. The user no longer needs to suffer 
long delays following a system crash; OEMs (and 
system manufacturers) no longer need to incur the cost 
of person-dependent recovery. The user does not feel 
helpless and out of control and the OEM saves money 
and gains a faithful customer in the process. 

5.0 IMPLEMENTING A PNP FLASH 
BIOS USING A 2-Mb BOOT 
BLOCK 

By now it is evident that Intel’s boot block flash 
memory is an ideal solution for implementing PnP BIOS 
within a system. However, there are implementation 
criteria that need to be explained: 

• How does this hardware-locking of the boot block 
work? 

• How does one connect the flash memory to a 
system? 

• What about address mapping? 

• How does one utilize a 256-KB BIOS within an 
defined 128-KB BIOS space? 

These are just some of the implementation concerns that 
need to be addressed. The following section will shed 
some light on these questions and provide an example 
implementation of a PnP flash BIOS. 
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5.1 Overview of the 2-Mb Boot 
Block 

Figure 1 showed that either a 1-Mb or 2-Mb flash device 
can be used to implement BIOS. The choice of device 
depends on the contents of the BIOS and the level of 
sophistication desired in the design. The 1-Mb boot 
block flash memory is an established standard for 
implementing flash BIOS, not just for PnP. However, 
more BIOS space will be needed to support 
standardization of current features (like power 
management and virus aids) and impending future 
enhancements (like Windows 95 and Desktop 
Management Interfaces*, DMI). As consumers clamor 
for “more bang for the buck,” more features and 
functions will be integrated into the standard PC. The 
migration beyond a 128-KB BIOS is inevitable. 
Already, some vendors have adopted code compression 
of BIOS in order to adhere to this 128-KB space 
limitation. This is a viable alternative that requires 
additional code decompression algorithms and consumes 
additional RAM space to store the full BIOS. 
Fortunately, Intel provides a secure means of code 
storage as well as a built-in growth path with its boot 
block architecture. 


Within this implementation section, references to the 
flash BIOS device assume the 28F002B boot block 
flash. A similar approach can be followed to implement 
a similar solution using the 1-Mb boot block. However, 
some of the techniques included in this design example 
will not be applicable. The organization and addressing 
scheme of the 28F002B device, along with that of the 
1-Mb boot block (as reference), is depicted is Figure 4. 
The pinout for the Thin Small Outline Package (TSOP) 
and Plastic Small Outline Package (PSOP) of the 
28F002B are shown in the Appendix. A table listing the 
functions of each of the pins identified in the pin 
diagrams is also available in the Appendix. The five, 
independently erasable blocks consist of the hardware- 
lockable boot block (16 KB), the two parameter blocks 
(8 KB each), and two main blocks (a 96-KB block and a 
128-KB block). The hardware-lockable boot block can 
be located at either the top (28F002B-T) or bottom 
(28F002B-B) of the 1-MB memory map, enabling easy 
interface to all Intel architecture microprocessors as well 
as embedded processor like the i960® processor 
(KA/SA) and non-Intel microprocessors that support 
location of the BIOS memory area at the low address. 
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Figure 4. Architectural Organization of 28F002B-T and 28F001B-T Flash Memory Devices 
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The 16-KB boot block is intended for storage of the 
system critical BIOS boot code. This block is unlocked 
when the RP# pin is between the specified range for 
Vpph; after unlocking, program and erase operations can 
be performed. Taking the RP# pin below the specified 
minimum value for Vpph locks this block, disabling 
program and erase functions. The two parameter blocks 
can contain supplementary boot code or the system 
configuration information (ESCD). They are intended 
for storage of frequently updated system parameters or 
configurations. In addition to the ESCD, the nonvolatile 
parameter blocks can be used to retain a copy of the 
CMOS setup or to store/track add-in card addresses, 
DMA channels, or interrupt values/level. The main 
blocks may be used for the storage of the main PnP 
BIOS code and runtime services. The WE# input 
provides write protection for the entire flash memory 
device. The Vpp pin offers additional write protection 
since standard boot block flash requires Vpph be 
between 11.4V and 12.6V before any Program or Erase 
command sequences are recognized. 


Sometimes, however, design constraints make it difficult 
to provide 12V ± 5 % to the fla£h memory. It was to 
accommodate situations such as these that Intel designed 
SmartVoltage flash memory. SmartVoltage (SVT) boot 
block products include V P p sense circuitry which allows 
both 12V and 5V program and erase. In addition, read 
capability is available at both 5V and 3.3V. These 
features y provide additional design ;/ benefits^ | [ and; 
implementation flexibility to serve multiple 
environments. Higher assembly line throughput, for 
example, can be achieved using 12V Vpp whereas some 
in-system programming layout and trace difficulties can 
be greatly eased with a 5V Vpp. When the Vpp input of a 
SmartVoltage device is connected to 5V, the range for 
Vpph is 4.5V to 5.5V. The SVT devices even include a 
dedicated write protect pin for locking and/or unlocking 
the boot block with a logic signal. The combination of 
SmartVoltage and the boot block architecture provides a 
robust solution that eliminates design barriers and 
quickens system time-to-market. 


A complete solution cannot be achieved without 
mention of available package options. The Boot block 
products are offered in PDIP, PLCC, PSOP, and TSOP 
form factors. Due to handling similarities in the 
manufacturing flow, more vendors are changing from 
the previous PLCC package standard to the smaller 
PSOP package. 


5.2 PnP Boot Block Flash BIOS 
Implementation (Hardware) 

In order to implement a PnP flash BIOS, certain 
hardware criteria must be met. For standard boot block 
flash and SmartVoltage boot block in 12V mode, there 
must be a means for raising Vpp to 12V and lowering it 
to normal levels after programming or erasure is 
complete. There must also exist a method for write- 
enabling the entire flash device. A way of gating the 
RP# input is necessary to insure the integrity of the 
program signal for the boot block (usually a 
POWERGOOD signal is appropriate). Bi-directional 
transceivers or data buffers may be needed for the DQ 
pins. Lastly, there must be a means for relocating the 
recovery code after the system boots when a 2-Mb 
density boot block flash is used. 

5.2.1 BIOS BOOT CODE RELOCATION 

Following a system reset or power-on, the typical 
system first goes to the high memory area of the 1-MB 
memory map, where the boot code is stored. The 
checksum routine (or whatever means of verification is 
employed) is run to verify the status of the BIOS 
currently available to the system. If the main BIOS is 
determined to be good, this code proceeds to initialize 
the system and its peripherals and passes control to the 
operating system; as mentioned earlier, this is done by 
jumping to the address pointed to by the jump vector. If, 
however, the main BIOS is found to be corrupted or 
unusable (i.e., the checksum value read does not match 
the expected value), the BIOS recovery code must 
reconstruct a new BIOS. The recovery code reconstructs 
the BIOS by reading the BIOS update file from a floppy 
or COM port (modem), erasing all the other blocks 
(except the boot block), reprogramming the flash with 
the new BIOS data, and initiating a RESET to reboot the 
system. As a result, there are two modes of operation in 
which the system can function: boot mode and runtime 
mode. 

In boot mode, which occurs at power-up, the system 
expects the kernel code to be located at physical address 
FEOOOh-FFFFFh. The system then validates the status 
of main BIOS. If this check results in a good BIOS, the 
system is initialized and control is transferred to the 
operating system via the jump vector. At this point 
runtime mode is entered; the system now expects the 
main BIOS to be located at physical address EOOOOh- 
FFFFFh (see Figure 5). The 1-Mb boot block maps 
directly into this 128-KB space allocated for BIOS 
usage. The 2-Mb boot block, however, must be able to 
switch between its upper 128-KB block (which includes 
the boot and parameter blocks) and its lower 128-KB 
block (which is where the main BIOS should be stored). 
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The system initialization routine and the configuration 
utilities should be located in the upper 128-KB block of 
the 2-Mb boot block. The lower 128-KB block should 
be used for runtime BIOS services and other advanced 
features. 

To achieve this swapping of boot BIOS and main BIOS, 
several methods can be applied. A small piece of logic 
can be added to the board to swap the address ranges; an 
easier approach is to simply invert the A 17 input to the 
flash. For runtime mode operation, A17 is maintained at 
logic low, thus mapping the lower 128-KB block of the 
2-Mb boot block to the 128-KB BIOS area in main 
memory. During recovery, the polarity of A17 can be 
flipped to shift the kernel code to the F segment, i.e., 
swap the lower 128-KB block for the upper 128-KB 
block. A keyboard sequence, motherboard switch, or 
jumper can be used to toggle A17. The hardware 
example in Figure 6 illustrates the use of this tactic. 
Another approach would be to locate the flash BIOS at a 
high memory area (above 1 MB) and use BIOS 


extension calls to access the runtime BIOS services in 
the 128-KB block. This method, however, takes quite a 
bit of time because of the overhead associated with the 
software BIOS call (saving status, return location after 
call, etc.). Note that depending on the particular BIOS 
implementation (i.e., vendor, platform, etc.), the 
addresses indicated in this example may change slightly. 

When the flash memory is being reprogrammed, it is 
necessary to relocate the BIOS recovery code to RAM 
before proceeding, as Figure 5 illustrates. Although the 
flash memory allows suspension of an erase cycle to 
permit reading of another block, attempting to read one 
of the flash blocks while a write to another block is in 
progress is not permitted. This is a characteristic of all 
flash products currently on the market today. As a result, 
the BIOS recovery code must be copied to RAM and 
executed out of RAM in order to reprogram the flash 
memory with the new BIOS code. 
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Upper Memory Area: BIOS Space 


System RAM 



Figure 5. BIOS Relocation for 2-Mb Boot Block 


5.2.2 Vpr GENERATION AND WRITE 
PROTECTION 

The Vpp pin enables programming and erasure of the 
flash device. In addition to this, Vpp also provides write 
protection of the flash memory blocks. If Vpp is below 
its required level, no Program or Erase command 
sequence, whether valid or not, will have any affect on 
the flash. If code (or data) security is of paramount 
importance to a particular design then a flash memory 
device with a dedicated Vpp pin is the best choice. 

As for PnP, the BIOS will be tweaked from time to time 
by vendors, new features will be added, and standard 
routines will be enhanced. One particular allocation 
scheme of PnP requires that the ESCD be re-written 
each time a new system device is added. Although flash 
memory enables ail these benefits, none of them can be 
achieved without the generation of the programming 


voltage, Vpp. It is imperative that Vpp be generated 
cleanly to avoid incorrect programming or erase as well 
as spurious writes (which can lead to unwanted system 
crashes). Keep in mind that a clean Vcc is as important 
for fail-safe flash operation as a clean Vpp. 

The IBM PC technical reference manual specifies a 12V 
supply with a tolerance of + 5% to - 4%. The Vpp 
specifications of the boot block flash memory align to 
this standard. If the power supply employed in the 
design meets the IBM specification and has CMOS 
logic, the 12V supply from the power supply can be tied 
directly to the 28F002B. This approach, however, is not 
recommended since it can degrade program/erase 
performance or unfavorably affect reliability. In most 
desktops, an unregulated 12V supply exists in addition 
to a 5V. It is recommended that 5V be used to obtain the 
12V ±5% rail. In addition to being more efficient and 
more economical than the unregulated method, this 
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approach does not require a minimum load to maintain 
the regulation, as is necessary when buffering an 
unregulated supply using modular solutions. Likewise, 
Vpp can be generated by regulating (or stepping down) 
from a higher voltage. Additional information on Vpp 
generation strategies can be found in Application 
Note 357: “Power Supply Solutions for Flash Memory,” 
(order # 292092) and the technical paper entitled “Small 
and Low-Cost Power Supply Solutions for Intel’s Rash 
Memory Products,” (order # 297534). 

Of course, if a 5V environment is necessary, 
Smart Voltage is the irrefutable choice. These voltage 
sensing devices allow manufacturers or OEMs to choose 
either a 12V or 5 V Vpp level, depending on their 
specific design needs. In this way, the extra write 
protection provided by having a separate Vpp pin is 
retained and the appropriate hardware environment can 
be maintained. When Vpp falls below the specified value 
for V ppl (Vpplk for SmartVoltage devices), program and 
erase cycles to the flash device are prohibited (ignored), 
although the device can still be read normally. 
Additional software protection for Vpp can be added by 
requiring a password before enabling Vpp to proper 
program/erase levels. The RP# pin, gated by the 
POWERGOOD signal of the power supply and the 
system RESET# pin, provides further write protection 
for the information stored within the boot block. 

5.2.3 HARDWARE DESIGN EXAMPLE 

Figure 6 shows an example design for implementing a 
flash memory-based BIOS within a PC motherboard. 
Specific signal generation is discussed in the following 
sections. The Vpp generation circuit used can drive 
200 mA of Vpp current with an efficiency rating of 88%. 
Even though a transceiver may not be necessary, it is 
specified in this example as reference. Standard PCs 
expect a ROM-based BIOS and do not enable the data 
bus to the BIOS ROM during write sequences (in fact, 
standard PCs do not generate the write enable signal 
when the address decoded references the BIOS area). 
The transceiver are used to allow reading and writing of 
the flash BIOS within specified timings. 


Vpp Generation Circuit 

The LT1301 used in Figure 6 is a micropower step-up 
DC converter available in an 8-pin surface mount 
package. The input of the LT130I is capable of selecting 
between 5V or 12V outputs, idea! for use with 
SmartVoltage flash memory. Since series inductance in 
the filter capacitor and diode switching transients may 
cause high frequency noise spikes at the output, ati 
optional filter design is included with the example. 

The Max662A provides a regiilated output voltage at 
30 mA from a 5V ±5% power supply. It uses internal 
;cKar|e pumps and external capacitors to generate 12V, 
eljniihating inductors. Regulation is provided by a pulse 
skipping scheme that monitors the output voltage level 
and turns on the charge pumps when the output voltage 
starts to droop. 

Both solutions offer a shutdown pin for protection 
against accidental erasure of the flash memory. 
Additionally, good PC-board layout practices can also 
eliminate this potential problem. 


5.2. 3.2 RP# 

This section gives a sample implementation of the PnP 
flash BIOS. The block diagram that supports this 
implementation is shown in Figure 6. The RP# gating 
methodology described in the previous section is 
implemented in this sample design; the PWRGOOD 
signal (or Vcc input) and the hardware generated 
RESET# signal are monitored for appropriate voltage 
levels using a voltage monitor. This scheme masks 
invalid bus conditions from the flash device, thus 
providing additional buffering accidental erasure. As 
one might expect, the flash memory defaults to read 
array mode. It may also be desirable to gate RP# with a 
General Purpose Input/Output (GPIO) line to enable 
shutting off the BIOS after it has been shadowed. A 
jumper to 12V (with some kind of protection, like 
decoupling capacitors or buffer circuit) can be used to 
unlock the boot block. This control may also be 
accomplished via software interrupt, although this is a 
less secure means than the straight hardware method. 
The SmartVoltage boot block products support this type 
of boot block locking and unlocking; however, there is a 
separate WP# pin that permits locking and unlocking of 
the boot block with 5V if 12V is not being supplied to 
the flash memory. 


50 



AP-608 


iny 


5. 2.3.3 WE# 

The WE# signal generated by the processor usually 
cannot be used in this implementation because the 
processor does not expect this area to be writeable (i.e., 
it thinks the BIOS is stored in a ROM). Therefore, the 
WE# signal must be generated externally using the bus 
definition signals and some discrete components. A 
write condition to the BIOS is established when the 
M/IO# (memory or I/O) signal indicates memory and the 
MEMW/R# (memory write or read) signal indicates 
write. Figure 6 illustrates this scheme. Further write 
protection for the BIOS can be achieved by gating the 
WE# signal with a GPIO line, effectively disabling 
writes to the flash BIOS unless permitted by the BIOS 
update algorithm. I/O port bits can be ANDed with the 
actual write pin to control the generation of the WE# 
signal to the flash memory. The bits used should be both 
readable and writeable. Flash memory devices that do 
not have a WE# pin suffer from more frequent spurious 
writes. Such memories use the CE#, OE#, and Vpp pins 
to decode a write sequence. Because the CE# input is 
decoded from switching address pins, it is not unheard 
of for this input to incur glitches. With Vpp at specified 
tolerance levels, this glitching can initiate writes — 
hardly a favorable state when updating BIOS code. 

5.2.3.4 CE# 

The CE# input is defined by the address condition that 
enables the flash device. No access to the flash chip will 
be permitted if the CE# input is deasserted. This input 
can be generated multiple ways as well. Chipsets often 
take care of this type of decoding internally, returning 
the lone chip select signal on one of their output pins. If 
a chipset is not used, pPLD or decoder can be used to 
generate the CE# input based on the address inputs used 
to indicate the flash memory device. Boot block 
products allow both CE# controlled program/erase as 
well as WE# controlled program/erase. The logic is such 


that whichever is asserted first controls the current 
program/erase sequence and latches the valid address. 
The WSM begins operation when that signal is 
deasserted (see Command User Interface, Section 
5.3. 2.2, for more details). 

5.2.3.5 OE# 

Whenever a read cycle is performed, the OE# input 
needs to be asserted. OE# is therefore gated by a 
memory read to the flash when it is enabled. This 
example uses the MEMW/R# signal to control the 
generation of OE#. It may be necessary to invert this 
signal in order to provide the correct signal polarity to 
this input. As with the WE# input, I/O bits as well as 
discrete components (that define, in this case, a read 
cycle) can be used. 

5.2.3.6 Address Inversion for 2-Mb Boot 
Block 

The address inversion scheme described earlier is used 
in this example. This input to the flash can also be gated 
by I/O port control bits if a software implementation is 
more appropriate. This example uses the Boot/Runtime 
Mode (B/RM#) selection pin (which may be software 
generated — controlled, say, by the checksum value) to 
control the inversion of An Alternatively, a 
programmable device (like a pPLD) can be used to 
actually decode the high order address bits and achieve 
the same result as the bit inversion. 

Some of the features employed in this example may be 
incorporated into a chipset, and therefore, the external 
circuitry may be unnecessary. The CE# input, for 
example, is available on most chipsets as a ROMCS# 
output and can be hooked directly to the CE# input of 
the flash memory. 
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V|n(3V - 10V) 



LT1301CS8 



Optional 
" Filter 


12V/200 mA 


4.75V - 5.5V 



C1: °- 22 ^n gnd 1 C2: 0.22fiF 


SA[0:16] 


MEMW/R# 



B/RM# 

MEMW/R# 


BIOS ADDR 11?| 
CONDITION OCDR 


D- 


Flash 

A 17 Memory 




LowVcc 

Mcmitor v cc 
(MAX70 5) 


NOTES (LT1302CS8): 

Input Range: 3.0V to 10V 

Output Current: Up to 200 mA @ Vin = 5V 

Typical Efficiency: 88% @ Load = 200 mA, Vin = 5V 

Switching Frequency: 155 Khz 

Operating Quiescent Current: 120 pA (typical) 

Shutdown Feature 

Shutdown Quiescent Current: 15 pA (max.) 

Rise time from shutdown: 1 .2 ms (typical) 


NOTES (MAX662A): 

Input Range: 4.75V - 5.5V 

Output Current: Up to 30 mA @ Vin = 5V 

Typical Efficiency: 74% @ Load = 30 mA, Vin = 5V 

Switching Frequency: 500KHz 

Operating Quiescent Current: -320 pA 

Shutdown Feature 

Shutdown Quiescent Current: -70 pA 

Rise time from shutdown: -500 ps (typical) 


Figure 6. PnP Boot Block Flash BIOS Hardware Implementation Example 
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5.3 PnP Boot Block Flash BIOS 
Implementation (Software) 

In order to update the PnP BIOS, some type of flash 
programming utility must be employed. This utility 
cannot program the boot block due to the hardware 
protection provided by the RP# pin (or the WP# pin on 
SmartVoltage flash memory), thereby preserving the 
boot or recovery code contained therein. In most cases, 
however, this programming utility will be unique for 
each system because it is dependent on the hardware 
used in the design. The method of raising and lowering 
Vpp, for instance, is dependent on hardware, as is the 
methodology for disabling shadow RAM or cache. Since 
reprogramming of the flash memory will result in a 
reboot, it is not necessary to keep track of system status 
information, (like shadow status, cache status, power 
management status, cursor position, etc.). 

Boot block devices have on-board programming and 
erase algorithms with a built-in SRAM-compatible 
interface for simplified software creation and debugging. 
This is accomplished through the on-chip write state 
machine (WSM), status and command registers. These 
registers perform all of the necessary actions, from Vpp 
monitoring to erase suspend. The WSM even times the 
programming pulses, obviating the need for program 
timers and preconditions blocks as part of its erase 
process, eliminating the need to “0” program prior to 
erase. 

5.3.1 PROGRAMMING CONSIDERATIONS 

Due to the difficulty of discussing every possible PnP 
flash programming utility in this application note, a 
generic programming utility that can work on all 
platforms will be examined. Inherent to this approach is 
an interface between the programming utility and the 
PnP BIOS. This interface is accomplished by selecting a 
ROM BIOS interrupt number and assigning a function 
number through which all flash-specific functions can be 
accessed. Table 1 lists some possible functions that 
might be defined for the interface. Table 4, in the 
Appendix, provides a list of the ROM BIOS interrupts 
currently used or preassigned. Once an available (or 
unused) interrupt number and/or function has been 
determined, the flash programming functions can then 
be defined. For this example, assume interrupt 17, 
function OFh has been selected for implementing the 
flash programming subfunctions. 


Table 1. Generic Subfunctions for Flash 
Programming Utility 


Subfunction 

Description 

OOh 

Validate Checksum 

01 h 

Raise Programming Voltage (Vpp) 

02h 

Lower Programming Voltage (Vpp) 

03h 

Flash Write Enable 

04h 

Flash Write Disable 

05h - FEh 

Reserved for Future Use 

FFh 

Generate System RESET 


The generic specification is as follows: 

Input: AH = OFh 

AL = Subfunction 

Output: If CARRY FLAG set = Error 

If CARRY FLAG clear = Success 
AL = 85h 

(If 85h is defined as a subfunction in the future, a new 
return value must be specified.) 

The carry flag was chosen because most instruction sets 
include specific instructions for setting and clearing this 
bit. The overflow or zero flag may be used in place of 
the carry flag. Likewise, a register value may be 
returned in case of an error (as is done with the success 
case in this example). The methodology may be changed 
but the function must be preserved, i.e., regardless of 
how it is done, there must be some way of informing the 
system of a successful or unsuccessful instruction 
execution. 

A few caveats of which to be aware: 

1. A PnP BIOS version subfunction may be defined 
for distinction or to enable/disable features not 
supported in every system 

2. If both a flash chip and an EPROM exist on the 
system board (for example SCSI or keyboard 
BIOS), two additional subfunctions need to be 
defined to select the flash memory instead of the 
EPROM. 

3. The Validate Checksum function can be defined 
many ways, but basically it needs to be able to 
compare the checksum of the current BIOS (this 
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may need to be calculated) with the saved 
checksum value. If they match, then boot can 
continue; otherwise, a new BIOS needs to be 
uploaded. 

4. Keep in mind that all registers used by these 
subfunctions will be destroyed. If their value needs 
to be maintained, the register should be pushed 
onto the stack (or saved) prior to use and then 
restored afterwards. 

Subfunction OOh: Validate Checksum — checks the 
checksum of the loaded BIOS against that stored in 
memory. If they match, it returns true, else it returns an 
error and a new BIOS should be loaded. 

Input: AH = OFh 

AL = OOh 

Output: CF set = Error 

CF clear = Success 
AL = 85h 

Subfunction Olh: Raise Programming Voltage 

( v pp)— raises Vpp to the required voltage level (in this 
case, greater than 1 1 .4V) and waits until the voltage is 
steady. 

Input: AH = OFh 

AL = Olh 

Output: CF set = Error 

CF clear = Success 
AL = 85h 

If the boot block area of the flash memory is to be 
accessed and software control of the RP# input is 
desired, this function may be used to raise the voltage on 
the RP# signal. Alternatively, another subfunction may 
be defined to accomplish this purpose. Remember, 
however, that software control of the RP# input is not 
recommended as it eliminates the hardware protection 
feature of the boot block . 

Subfunction 02h: Lower Programming Voltage 

(Vcc) — lowers Vpp to its normal level (in this case, less 
than 6.5V) and waits until the voltage is steady. 

Input: AH = OFh 

AL = 02h 

Output: CF set = Error 

CF clear = Success 
AL = 85h 


If access to the boot block area of the flash memory is 
completed and software control of the RP# input is in 
effect, this function may be used to lower the voltage on 
the RP# signal. Alternatively, another subfunction may 
be defined to accomplish this purpose. Remember, 
however, that software control of the RP# input is not 
recommended as it eliminates the hardware protection 
feature of the boot block . 

Subfunction 03h: Flash Memory Write Enable — 

enables erase/program commands to the flash chip and 
waits the required amount of time for stabilization (if 
necessary). 

Input: AH = OFh 

AL = 03h 

Output: CF set = Error 

CF clear = Success 
AL = 85h 

Subfunction 04h: Flash Memory Write Disable — 
disables Erase/Program commands to the flash chip and 
waits the required amount of time for stabilization (if 
necessary). 

Input: AH = OFh 

AL = 04h 

Output: CF set = Error 

CF clear = Success 
AL = 85h 

Subfunction FFh: Generate System RESET — issues 
the RESET command necessary to reboot the system 
after the flash memory has been altered. 

Input: AH = OFh 

AL = FFh 
Output: None 

5.3.2 REPROGRAMMING 

CONSIDERATIONS 

One of the prime benefits of a flash-based PnP BIOS is 
the ability to do in-system updating. When a flash chip 
is soldered directly onto a system board, there are two 
methods available for reprogramming: in-system writing 
(ISW) and on-board programming (OBP). The major 
difference is in how Vpp is supplied and whether the 
programming process is controlled by the system or 
some external hardware. The Vpp voltage is supplied 
locally and the system is responsible for reprogramming 
with the ISW approach. With OBP, the external PROM 
programmer supplies the necessary Vpp for 
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programming, and controls the reprogramming process. 
Cost, ease-of-implementation, and reprogramming 
environment are some of the trade-offs that must be 
made when considering which methodology is best. 
There are advantages to both methods. This application 
note focuses on the ISW approach. 

5.3.2.1 In-System Write Considerations 

The following items are required to have an ISW 
capable system for updating the PnP BIOS: 

o Microprocessor or controller (to control the 
reprogramming process) 

° PnP BIOS boot code, communications software, and 
PnP BIOS update algorithm 

o Data import capability (floppy disk, serial, network, 
etc.) 

0 Vpp generator or regulator (12V products only) 

Vpp Generation 

Vpp generation has already been discussed in previous 
sections, and since most ISW systems include voltage 
divider circuits that provide a path to ground, ESD 
protection is not needed for the Vpp pin. If, however, a 
system does not have this voltage divider circuitry 
(check the schematics) or the Vpp supply is switched 
directly, a resistor to ground should be added to prevent 
damage due to electrostatic discharge. The tolerance of 
the Vpp pin is also important to be wary of. Although 
5% tolerance is tighter than 10%, it usually yields a 
higher programming time. Such a trade-off may be 
necessary to make for certain applications. When using 
the SmartVoltage devices in 12V mode, the same care 
must be taken in generating Vpp as with the standard 
boot block. In the 5V mode of the SVT devices, 
however, this extra protection is not necessary. 
Nonetheless, the Vcc signal should be as clean as the 
Vpp signal. 

Data Import Capability 

The flash memory does not care how the new PnP 
update code is fed to it — any convenient means of 
downloading the necessary information is acceptable. 
This means the flash memory will not be a barrier to 
completion if, for instance, design constraints call for a 
parallel link instead of a serial link. Even though most 
communication is serial, error free serial communication 
still needs some kind of buffering to allow for proper 
packet reconstruction after transmission. The download 
time is another factor in deciding on a data import 


methodology. Although a serial interface, like JTAG, is 
easier to implement, in practice it is actually slower than 
other methods. An assembly line will see noticeable 
differences in program time when using a JTAG 
interface versus a parallel interface, for instance. 

ISW Boot Code 

The PnP BIOS boot code stored in the boot block of the 
flash memory should be able to handle remote updates 
by the processor as well as basic communication and 
reprogramming capabilities. This insures that any 
interruption of the reprogramming process would be 
recovered by resetting the flash and checking BIOS 
status or some reprogramming flags. 

Suppose the boot code begins execution after a system 
reset or power-on and determines that an invalid PnP 
BIOS is loaded in the system. This code should begin 
the reprogramming process by preparing the flash device 
for erasure and establishing a connection to the 
reprogramming protocol, perhaps through an interrupt, 
say R_INTR. Once this connection is established, the 
reprogramming can commence. Some kind of valid (or 
complete) signal needs to be provided to the boot code 
to let it know that reprogramming is complete, say an 
R_DONE interrupt from the update protocol. Should this 
reprogramming be interrupted, the boot code should be 
able to recover by recognizing that a valid BIOS still has 
not been loaded and re-initiating the reprogram 
algorithm. 

Communications Software 

Whatever means is used to download the information to 
be programmed should guarantee accurate data 
transmission. The protocol employed can be a simple 
read-back technique or a complex error-free 
communications protocol. The simple read-back 
methodology consists of the CPU indicating to the 
system that it wishes to update the BIOS by asserting the 
R_INTR interrupt. Once the PnP BIOS acknowledges 
this request, it prepares the flash device for updating and 
transfers control to the processor. The flash memory 
then waits for the R_DONE interrupt. Once the 
reprogramming is complete, the system should resend 
the update code to verify the programming sequence. 

PnP BIOS Reprogramming Routine 

In system reprogramming of the system BIOS is one of 
the many advantages that flash memory brings to BIOS 
world. The algorithm needed to accomplish this 
reprogramming will vary from vendor to vendor. Rather 
than advocate any one method of implementation, the 
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flowchart in Figure 7 is provided to serve as a guide. 
This enables flexibility of design while insuring that all 
necessary components are incorporated into the 
reprogramming code. Even though the flowchart may 
not indicate so, user consideration should be embedded 
in the update routine, i.e., status bars, confirmation 
prompts, etc. 

5. 3. 2.2 Command User Interface 

The built-in Command User Interface (CUI) of the boot 
block (and all Intel second-generation flash devices) 


provides a standard interface to the internal Write State 
Machine (WSM) of the flash memory. Table 2 lists the 
commands available through the CUI and the number of 
cycles each requires. The CUI simplifies processor 
interfacing by granting full read/write functionality to 
the CE#, WE#, and OE# inputs. Raising Vpp to Vpph or 
lowering it to Vppl toggles the flash memory between 
read/write mode and read-only mode. When in read-only 
mode, only the first three commands listed in Table 2 
are accessible. In read/write mode, all commands are 
permitted. 
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Figure 7. Flowchart for Update Algorithm. 

Note that although this is a fairly generic algorithm, similar flows 
have been implemented by BIOS vendors and OEMs since 1991. 





AP-608 





Table 2. CUI Commands for the 28F200/002B Flash Memory 


Command 

# of 
Cycles 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 

Oper 

Addr 

Data 

Read Array/Reset 

1 

Write 

X 

FFh 




Intelligent Identifier 

3 

Write 

X 

90h 

Read 

IA 

IID 

Read Status Register 

2 

Write 

X 

70h 

Read 

X 

SRD 

Clear Status Register 

1 

Write 

X 

50h 




Erase Setup/Erase Confirm 

2 

Write 

BA 

20h 

Write 

BA 

DOh 

Word/Byte Write Setup/Write 

2 

Write 

WA 

40h 

Write 

WA 

WD 

Erase Suspend/Erase Resume 

2 

Write 

X 

BOh 

Write 

X 

DOh 

Alternate Word/Byte Write 
Setup/Write 

2 

Write 

WA 

lOh 

Write 

WA 

WD 


NOTE: 

To avoid excess current usage, the high order 8-bits of the data bus should be tied to Vcc or Vss if a 1 6-bit wide data bus is 
being used (16-bit data bus only valid for the 28F200B devices) 

BA = Block Address to be erased 

WA = Address to be programmed 

WD = Data to be programmed at address WA 

IA = Identifier Address: OOh for manufacturer code; 01 h for device code 

(following this command, two read operations access the manufacturer and device codes) 

IID = Intelligent Identifier Data 

SRD = Status Register Data 


Read Array/Reset (FFh): This single command points 
the read path at the memory array. If the processor 
performs a CE#/OE#-controlled read following a two- 
write sequence, the device will output the status register 
contents. If the read command is given following an 
Erase Setup command, the device is reset to read the 
array. Two sequential Read Array commands is required 
to place the device in read array mode after write setup. 
If the system leaves Vpp turned on during a system reset, 
incorporate a command register device reset into the 
hardware initialization routine. This is a safeguard in 
case the flash device is being programmed or erased 
when the system reset occurs. 

Intelligent Identifier (90h): This commands points the 
output path to the Intelligent Identifier circuitry. Only 
values at address 0 and 1 can be read (only address Ao is 
valid in this mode). All other inputs are ignored. 


Read Status Register (70h): After this command, the 
subsequent read will output the contents of the status 
register, regardless of the value on the address pins. This 
is one of two commands that can be issued while the 
WSM is operating. The device automatically enters this 
mode following write (program) or erase completion. 

Clear Status Register (50h): This command clears the 
program status and erase status bits of the status register. 
The WSM is only allowed to set these bits when it is 
performing one of these tasks; however, it cannot clear 
them. This is to allow synchronization with the 
processor. 

Erase Setup (20h): This command prepares the flash 
memory for erasure and waits for the Erase Confirm 
command. If the next command is not the Erase Confirm 
command, then the program status and erase status bits 
of the status register are set. The device is placed in read 
status register mode and awaits the next command. 
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Erase Confirm (DOh): If the previous command is 
verified to be the Erase Setup command, the CUI 
enables the WSM, latches the address and data lines and 
responds only to the Read Status Register and Erase 
Suspend commands. While the WSM is operating, 
toggling the OE# input causes the device to output 
Status Register information. 

Erase Suspend (BOh): This command is only valid 
when the WSM is executing an Erase command 
sequence. Once it has been acknowledged, the CUI 
instructs the WSM to suspend its current erase 
operation; the CUI then waits for the Read Status 
Register or Erase Resume commands, ignoring all other 
commands. When the WSM responds to the CUI that it 
lias suspended erase operations (by setting the WSM 
status bit in the Status register), the Read Array 
command can also be recognized by the CUI. Even 
though the address and data latches are locked, the 
address lines can still drive the read path. The WSM will 
continue to run after the suspend. 

Erase Resume (DOh): This command causes the CUI to 
clear the WSM status bit in the Status Register and 
instructs the WSM to resume the last suspended erase 
operation. This is only done if an Erase Suspend 
command was previously issued; otherwise, this 
command has no affect. 

More information on the specific state of input pins and 
the actual bus definitions for these commands can be 
found in the datasheets. 

6.0 DESIGNING FOR THE FUTURE 

Due to the abundance of healthy competition in the flash 
market, vendors and OEMs always seek out alternative 
solutions for designs. Most of the discussions seem 
centered around three areas: programming voltage, write 
protection, and blocking architecture. Intel is committed 
to the boot block architecture and has invested 
considerable time and resources into proliferating the 
family to meet market demands. 

6.1 The 5V-Only Question 

Many system manufacturers are concerned with the cost, 
space and analog design necessary to accommodate the 
12V requirement for program or erase of a flash 
memory. 


is is a justified concern, one that is answerable a number 
of ways. The question that must be answered, however, 
is not “What new changes are needed to support an on- 
board 12V supply?” but rather, “What is the best 
solution for the problem of reprogramming in-system?” 
Intel set out to answer the latter question — the result is 
the SmartVoltage (SVT) boot block products. 

Simply put, SmartVoltage flash memory supports either 
the 12V or the 5V paradigm. Manufacturers and OEMs 
can now decide which method is best for their particular 
environment and proceed with their choice without 
having to purchase separate components. An OEM 
might have some platforms that need 12V to support 
highest performance write systems. Low-end systems, 
however, are typically more power and cost-sensitive. 
SmartVoltage supports both implementations, allowing 
the OEM to make the trade-offs necessary for the 
intended market. The desired program/erase speed is one 
of the considerations that will determine which choice is 
best for a particular application, since performing 
program/erase at 1 2V is faster than at 5V. 

With the move from 12V / 5V to 5V / 3V on the 
horizon, it is easy to see how SmartVoltage technology 
will enable all types of system capabilities with its dual 
supply capability. The same SmartVoltage device can be 
programmed in the manufacturing flow with 12V for 
improved throuput. When the product is in the field and 
12V is no longer available, the same SmartVoltage 
device adapts to the environment, enabling updates 
using a 5V Vpp supply and 3.3V or 5V Vcc supply. This 
is the type of flexibility and ease of design that 
SmartVoltage flash memory products will drive. 


6.1*1 DESIGNING FOR SmartVoltage 

Smart Voltage brings 33V and 5 V .technology '.to the 
boot block family. Although both devices are pin 
compatible, it is necessary to know that some previously 
unused pins are now being used. If you plan to : migrate 
your designs to SmartVoltage, you need to be aware of 
the iim^ications&'yqur d^sigqy: 

The DU pin on the standard 2*Mb and 4-Mb boot block 
parts is the WP# pin on the SmartVoltage devices. 
Pleating this pin h not good design practice if migrating 
to SVT is in the plan. The solution is to connect this pin 
to Y<xl GND, or a control, pin as per the design. j 
SmartVoltage devices use Che WP# pin m conjunction j 
with the RP# .pin -to control boot block locking and 
unlocking as well as array protection. 
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SVT Write Protection 


Vpp 

RP# 

WP# 

Write Protection 

Vil 

X 

X 

All Blocks Locked 

VppLK 

Vil 

X 

All Blocks Locked 

VppLK 

Vhh 

X 

All Blocks Unlocked 

VppLK 

Vih 

Vil 

Boot Block Locked 

VppLK 

Vih 

V| H 

All Blocks Unlocked 


In addition to being backwards-compatible to the 
standard boot block products, SVT products include 
other features. In the event that a 12V trace is not 
supplied to the Vpp input, there is a 5V tolerant WP# pin 
that allows the boot block to be locked/unlocked without 
the need for high voltage. Only one of these locking 
schemes needs to be utilized; the internal circuitry is 
smart enough to figure out which is being used and 
adjusts accordingly, shifting Vil and Vih levels to match 
the supply source. Unlike other architectures, there is no 
need to apply 12V to some of the input pins to unlock 
blocks or access certain features. SmartVoltage offers 
uncompromised 5V-only technology. SmartVoltage is 
even capable of 3.3V read and will have 2.7V read 
capability in the future. 

7.0 SUMMARY 

PC users have always felt that the computer should be as 
simple to use as possible. To them, it was simply 
common sense that if they added something new to the 
system, it should simply work. In their opinion, if 
something changed in the system, the system should 
correct itself to adapt to this change, even if they (the 
user) caused this change. From their perspective, for all 
the money they spend on the computer, they shouldn’t 
have to worry about how to fix it too. We have all 
shared some of these thoughts, but up until now, it has 
always seemed just beyond our reach. 

Plug and Play promises to bring some of these long 
sought-after requests to fruition. The prospect of 
alleviating installation frustrations for end-users is very 
compelling, especially for the end-user. This concept 


even has appeal for manufacturers and designers alike, 
promising cost savings, consumer confidence in their 
products, and product differentiation. As it turns out, 
one of the ways of enabling this saving grace is using 
boot block flash to implement the system BIOS. 

In this application note, the features of boot block flash, 
as it relates to the PnP BIOS, have been carefully laid 
out. First the needs of Plug and Play were outlined: 

1 . System BIOS storage 

2. Nonvolatile area for system configuration database 

3. Recovery code for updateability 

4. Backwards compatibility to established standards 

Then the pertinent issues for implementing this design 
were examined — from hardware lockability to 
generating programming voltages; from software 
requirements to BIOS recovery code; from 
implementation specific options to reprogramming 
algorithms. An example implementation was also 
provided, which included both hardware and software 
considerations. Even the benefits to the user as well as 
the manufacturer were explored. The solution to the 
BIOS challenges brought about by Plug and Play have 
been met. Boot block flash caters to all the requirements 
of a PnP BIOS without compromising design flexibility 
or creativity. 

Plug and Play is more than just a term used to mean 
making the PC more like a Mac (what foolishness — you 
cannot even add hardware to a Mac). It is a real 
specification that will change the way PCs are used in 
the future. As the buzzword gamers momentum, its 
implementation will become more widespread. This 
expansion will bring forth more people delving into the 
make-up of PnP and attempting to “tweak” it for 
differing purposes. BIOS must be able to support the 
current standards and conform to all the new techniques 
and implementations yet to come. Intel’s boot block 
flash offers the best solution to this quiet revolution. 
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8.0 ADDITIONAL INFORMATION 


8.1 References 

For more information the concepts and ideas presented 
in this application note, the reader is directed to the 
following reference materials for further reading. 


Order Number 

Document 

292077 

AP-341 : “Designing an Updateable BIOS Using Flash Memory” 

292092 

AP-357: “Power Supply Solutions for Flash Memory” 

292098 

AP-363: “Extended Flash BIOS Concepts for Portable PCs” 

292148 

AP-604: “Using Intel’s Boot Block Flash Memory Parameter Blocks to 
Replace EEPROM” 

290406 

28F001 BX-T/28F001 BX-B 1M CMOS Flash Memory Datasheet 

290448 

28F200BX-T/B, 28F002BX-T/B 2-Mbit Boot Block Flash Memory Family 
Datasheet 

290531 

2-Mbit SmartVoltage Boot Block Flash Memory Familyt 

Contact Intel/Distribution 
Sales Office 

Plug and Play BIOS Specification vl.OA by Compaq, Phoenix, & Intel, 
May 1994 

Contact Intel/Distribution 
Sales Office 

Extended System Configuration Data Specification vl .02A by Compaq, 
Phoenix, ,& Intel, May 1994 

Contact Intel/Distribution 
Sales Office 

Plug and Play ISA Specification vl.OA by Microsoft and Intel, May 1994 

Contact Intel/Distribution 
Sales Office 

Plug and Play BIOS Extensions Design Guide vl .2 by Intel, May 1 994 



Desig nin g with Flash Memory by Brian Dipert and Markus Levy, 1993 Annabooks Publishers 
PC Interrupts by Ralf Brown and Jim Kyle, 1991 Addison- Wesley 
“Transforming the PC: Plug and Play” by Tom Halfhill, September 1994 Byte Magazine 
Plug and Play SCSI Specification by Adaptec, DEC, et. al., March 1994 
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APPENDIX A 

PINOUTS, LEAD DESCRIPTIONS AND 
BIOS-SPECIFIC INTERRUPTS 





Figure 9. 44-Lead PSOP 28F002BX Flash Device Pinout 
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Table 3. Definition of 28F002B Pins 


Symbol 

Name and Function 

A 0 -A 17 

ADDRESS INPUT PINS: Address inputs for memory addresses. Addresses are internally 
latched during a write cycle (on the rising edge of the WE# pulse). 

A9 

ADDRESS INPUT 9: When A 9 is at 12V, the signature mode is accessed. In this mode, A 0 
decodes between the manufacturer and device IDs. 

DQ0-DQ7 

DATA INPUT/OUTPUT PINS: Inputs array data on the second CE# and WE# cycle during 
a program command. Inputs commands to the Command User Interface when CE# and 
WE# are active. Data is internally latched during write and program cycles. Outputs array, 
intelligent identifier, and status register data. The data pins float to tri-state when the chip is 
deselected or outputs are disabled. 

CE# 

CHIP ENABLE: Activates the device’s control logic, input buffers, decoders, and sense 
amplifiers. When this active low signal is at logic high, it disables the memory device and 
reduces power consumption to standby levels. When CE# is logic low, the memory device 
is enabled. 

RP# 

RESET/DEEP POWER-DOWN: When this signal is at logic high, Vih (6.4V max.), it locks 
the boot block from program and erase. When RP# is 1 1 .4V min., the boot block is 
unlocked and can be programmed or erased. When RP# is at logic low, Vil, the boot block 
is locked, deep power-down mode is engaged and the WSM prevents all blocks from being 
programmed or erased. When RP# transitions from low to high, the device entered the 
read-array mode. 

OE# 

OUTPUT ENABLE: Gates the device’s outputs through the data buffers during a read 
cycle. This signal is active low. 

WE# 

WRITE ENABLE: Controls writes to the Command Register and array blocks. This signal 
is active low. Address and data are latched on the rising edge of WE# pulse. 

Vpp 

PROGRAM/ERASE POWER SUPPLY: 12V ± 10%, 12V ± 5% 

Vcc 

DEVICE POWER SUPPLY: 5V ± 10%, 5V ± 5% 

GND 

GROUND: Ground for all internal circuitry. 

NC 

NO CONNECT: Pin may be driven or left floating. 

DU 

DO NOT USE PIN: This pin is replaced by the WP# pin on the SmartVoltage products. To 
insure upgrade to SVT, connect this pin to Vcc, GND, or a control pin as necessary. 
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Table 4. Full Listing of BIOS-Specific Interrupts 


Interrupt Number 

Function 

05 

Print Screen 

10 

Function OOh - 13h: Standard Video Functions 
Function 14h - 15h: LCD Functions 
Function 1Ah - ICh: VGA Functions 
Function 30h: 3270PC Function 
Function 40h - 4Fh: Hercules VGA Functions 
Function 6Ah - 70h: Various VGA Functions 
Function 71 h - 73h: Tandy 2000 Functions 
Function 80h - 82h: DESQview v2.0x Functions 
Function BFh: Compaq Notebook Functions 
Function CCh - CDh: UltraVision BIOS Functions 
Function EFh: Extended Hercules Functions 
Function FOh - F7h: EGA RIL Functions 
Function FAh: EGA RIL Function 
Function FFh: DJ G032.EXE Extender Function 

11 

Get Equipment List 

12 

Get Memory Size 

15 

Function OOh - 03h: Cassette (PC & PCjr) Functions 
Function 04h - 05h: PS & PS2 System ABIOS Table 
Function OFh: PS/2 Format ESDI Drive 
Function 20h - 21 h: O/S Functions 
Function 40h - 44h: System Functions 
Function 4Fh: PS/2 Keyboard Intercept 
Function 53h: AMIBIOS APM Functions 
Function 80h - 89h: O/S & System Functions 
Function 90h - 91 h: O/S Functions 
Function COh: Get system Configuration 
Function Cl h - C2h: PS/2 BIOS Functions 
Function C3h - C5h: O/S & System Functions 
Function C6h - CFh: PS/2 Model 95 Functions 
Function D8h: AMIBIOS EISA Support 
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Table 4. Full Listing of BIOS-Specific Interrupts (Continued) 


Interrupt Number 

Function 

16 

Function OOh - 05h: Keyboard Functions 
Function 1 0h - 12h: Extended Keyboard Functions 
Function 12h: AT & PS/2 Extended keyboard Functions 
Function FOh - F4h: AMIBIOS CPU & Cache Controller Functions 

17 

Function OOh - 02h: Printer Functions 

18 

Start Cassette Basic (Genuine IBM Machines Only) 

19 

System Bootstrap Loader 

1A 

Function OOh - OBh: Real-Time Clock Functions 
Function 80h, 83h-90h: AMIBIOS Socket Functions 
Function 95h-A1h, AEh: AMIBIOS Socket Function 
Function Blh: AMIBIOS PCI Functions 

IB 

Control-Break Handler 

1C 

System Timer Tick 
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1.0 INTRODUCTION 

The flexibility of the Microsoft Flash File System (FFS) 
data structures makes it possible to arrange data in a 
symmetric layout on an Intel Flash PCMCIA card and 
still maintain FFS compatibility. Embedded applications 
that would like to have the exchangeability of FFS 
without the overhead of FFS can use this concept to 
their advantage. The FFS Symmetric Block Format 
(SBF) is a method of formatting a card to maintain FFS 
compatibility without using FFS in the embedded 
system. 

Symmetric Block Formatting is not a Flash File System, 
but rather a method to store data on a flash PCMCIA 
card by placing it within the flash space an FFS would 
perceive as file space. This is accomplished by 
formatting a card with FFS data structures present for a 
predetermined number of files. By defining where FFS 
looks for the files, we can alter the data contained within 
that space without upsetting the FFS format. The format 
operates on one assumption: the size and number of data 
objects must be known before formatting. This is where 
a Symmetric Block Format differs from a complete FFS: 
after the card is formatted, there can be no deviation 
from the size and number of files that were created 
unless the card is erased and reformatted. 

Symmetric Block Formatting fulfills the requirements of 
many embedded applications via a way to store data 
from an embedded system to a flash card, insert it into a 
PC running FFS, and be able to retrieve the data through 
FFS. The only variation, or implementation specific 
detail is the format, which is derived from the nature of 
the data. 

Before attempting to explain how to create a custom 
format, the following sections will introduce a basic 
Symmetric Block Format and explain concepts behind 
creating a custom Symmetric Block Format. 


2.0 THE SYMMETRIC FORMAT 

Each time FFS writes a file to a flash PCMCIA card, it 
creates several data structures within the card’s flash 
array that contain the file data. Where the structures end 
up in the card is anyone’s guess. It varies on the 
previous usage of the card and between one FFS 
implementation to another, but it’s usually scattered 
across the flash card in varying sized extents (see 
Figure 1). Only another FFS compatible driver can 
locate and reassemble the file correctly. 

FFS data structures permit data to be placed anywhere 
on the card. That is the first concept the Symmetric 
Block Format uses to its advantage. The format places 
all of the file data extents in contiguous locations within 
the flash array, and all of the structure data into a fixed 
location in each block. 

The first example of a format divides each block in the 
flash card into a fixed number of same sized pseudo- 
files; the total number is an even multiple of the block 
size. In the sample code at the end of this document, this 
is referred to as “Symmetric Formatting” (see Figure 2). 
For each block, the uppermost pseudo-file, known as a 
structure file, contains the structure data that enables 
FFS to read the card. 

A card formatted to the above conditions is just a card 
with a number of files containing FFH. However, notice 
that the file data is located contiguously within each 
block. A simple embedded program could write data to a 
flash address within the card without any difficulty. It 
could keep writing, as long as it avoided every fourth 
file by skipping the number the address range containing 
the structure file data. In fact, it could keep writing until 
it ran out of space. The card would then contain the 
embedded system’s data written to the space that FFS 
believes to be a file. If this card was removed from the 
embedded system and placed in a PC with Microsoft’s 
FFS loaded, FFS would be able to manage the files. If a 
file was opened with a file editor, it would contain the 
embedded system’s data. For systems that store x 
number of same-size records, this is all they would need 
to transfer data from an embedded system to a desktop. 

As we will see, this concept can be expanded to place 
the file space anywhere on the card within any number 
of files. 




Boot Record 
DE/FE/FI Structures 
Allocation Members 


File Entry Structures 
Allocation Structures/ 
Members 


File Entry Structures 
Allocation Structures/ 
Members 


File Entry Structures 
Allocation Structures/ 
Members 


File Entry Structures 
Allocation Structures/ 
Members 
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3.0 FFS FUNDAMENTALS 

FFS stores a file as a linked-list with each link a 
structure containing a pointer to a portion of that file’s 
data, called an extent. By traversing the list of structures, 
FFS reassembles the file into the proper order. FFS 
stores file names and subdirectories the same way: File 
entries have a structure that points to the first extent of 
the file’s data, and directory entries have a structure that 
points to the first file entry structure inside it. These 
linked-lists and data structures allow FFS to manage 
flash media effectively. 

The Symmetric Block Format has no knowledge of what 
these structures mean, they merely exist on the card to 
manipulate FFS into treating specific regions of the card 
as files. The structures are explained to facilitate the 
creation of a custom format. 


3.1 FFS Data Structures 

Microsoft defines (in their FFS Media Control Structures 
Specification, available from Microsoft) four different 
data structures for storing and arranging data in the MS- 
FFS format: File Entry, Directory Entry, File Info, and 
Boot Record. The Boot Record structure contains data 
describing the media’s geometry, as well as FFS version 
information. Since only one copy of the Boot Record 
exists, it will be excluded from all future references to 
the term “data structures” in this document for clarity. 


The file-directory hierarchy exists in the FEDE list (File 
Entry Directory Entry). Typing “DIR” (or “Is” in 
UNIX) lists that directory’s entries. In an FFS formatted 
flash card, the information displayed corresponds to the 
file and directory entries in that directory’s FEDE chain 
(see Figure 4). All files or subdirectory entries at the 
same level are part of one FEDE chain, and are referred 
to as siblings. If a subdirectory exists in that FEDE 
chain, it points to another FEDE chain. The tree 
continues if more subdirectories exist in that FEDE 
chain, and so on. 

Actual File Entry file data resembles the FEDE list, 
except each entry in the file’s list is a File Info Structure. 
This list of File Info Structures sequentially points to the 
regions of the card that contain the file’s data. FFS 
performs a read file request by locating the proper file 
entry, traversing its File Info chain, and returning the 
requested data. 

The File Entry and Directory Entry structures contain 
three pointers: Primary, Sibling and Secondary (see 
Figure 3). The Sibling Pointer always points to the next 
entry in the same level as that structure. The Primary 
Pointer of a Directory Entry points to the first entry in 
that directory’s FEDE chain. The Primary Pointer of a 
File Entry points to that file’s File Info chain. The 
Secondary Pointers of both structures point to files or 
directories that supersede the existing structures. 


struct FileOrDirectoryEntry { 

struct FilelnfoStructure { 

word 

Status ; 

word 

Status; 

dword 

SiblingPtr ; 

dword 

SiblingPtr; 

dword 

PrimaryPtr ; 

dword 

ExtentPtr ; 

dword 

SecondaryPtr ; 

dword 

SecondaryPtr; 

byte 

Attributes; 

byte 

Attributes ; 

word 

Time; 

word 

Time; 

word 

Date; 

word 

Date; 

word 

VarStructLen; 

word 

VarStructLen; 

byte 

NameLen ; 

word 

Uncompress edExtentLen 

byte 

Name [ 8 ] ; 

word 

CompressedExtentLen 

byte 

Ext [ 3 ] ; 



}; 


}; 



Figure 3. File Entry, Directory Entry and File Info Data Structures 
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The chain of File Info Structures point to regions of the 
card that contain file data, called extents. The maximum 
size of an extent is 65,535 bytes. Like File Entries and 
Directory Entries, File Info Structures contain Sibling 
and Secondary Pointers, but the Primary Pointer has 
been replaced by an Extent Pointer. The Extent Pointer 
points to the first extent of that file’s data. The Sibling 
Pointer addresses the next File Info Structure in the 
chain, and the Secondary Pointer indicates where to find 
updated or superseded extent data. 

3.2 Allocation of Flash Media 

Space for Structures and File 
Data 

The pointers in the previously explained structures don’t 
explicidy reference the physical address of a structure or 
extent within a block; instead, they point to Block 
Allocation Members, which in turn point to the physical 
location of that structure. This brings us to the second 
detail of FFS: Allocation Members. 


To maintain organization of the above data structures 
and file extents, FFS uses Block Allocation Members 
(BAM). Every File Entry, File Info Structure, Boot 
Record, Directory Entry or File Extent MUST have a 
BAM associated with it. These six-byte fields begin at 
the top of each erase block and grow downwards as 
more structures and extents are written to that block. 
They contain the length of the data region pointed to, 
the beginning offset of that data relative to address zero 
of that block, and a status field indicating whether or not 
the data being pointed to is valid or deleted. The status 
field allows FFS to determine which regions of the card 
are useful, and which can be discarded during a clean-up 
operation (called Reclaim). 

The Block Allocation Structure (BAS) in Figure 5 exists 
at the topmost address of every erase block. It contains 
the block’s logical number, whether or not it is a spare, 
the block’s erase count, etc. The erase count field helps 
the FFS wear-leveling algorithm decide the priority of 
that blocks clean-up status. This feature benefits all flash 
media by insuring that the difference between the 
number of times adjoining blocks have been erased 
never exceeds a certain threshold, which has the 
potential to corrupt data in adjacent blocks. 


struct BlockAllocMember { struct BlockAllocStructure { 


byte 

Status; 

dword 

BootRecordPtr ; 

byte 

Of f set [3 ] ; 

dword 

EraseCount; 

word 

Len; 

word 

BlockSeq; 



word 

BlockSeqChecksum; 



word 

Status ; 


} ; 

Figure 5. Block Allocation Structures 
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4.0 SYMMETRIC BLOCK 

FORMATTING EXPLAINED 

All FFS formatted cards must contain the following 
information: 

• One Boot Record + its BAM 

• One Root Directory Structure + its BAM 

• A BAS in every block with a unique logical block 
number 

These three requirements are necessary for all formats. 


When FFS writes a file to a flash card, it creates the 
following structures: 

• File Entry (appended to FEDE Chain) + its BAM 

• File Info + its BAM 
« Extent + its BAM 

• + Additional File Info/Extent Pairs, depending on the 
size of the File Entry 

Modeling a custom format is just a matter of arranging 
the above structures to inhabit a reserved location in 
each block. Since 64 KB - 1 is the largest size of an FFS 
extent, files larger than that need multiple File Info 
structures. 

To help in the visualization of what needs to be written 
to the card, observe Figure 6. 


Phvsioal 

Block One 

All other 

Phvsical Blocks (e.cr. . Block #2) 

OOOOOH to 
1BFFFH 

- Pseudo file data space 

20000H to 
3BFFF 

- Pseudo file data space 


(extents) for first 7 16-Kbyte 


(extents) for next 7 files. 


files. 



: ; Start 

Structure File space here. . . 

: ; Start 

Structure File space here. . . 

1C000H 

- Boot Record 

3C000H 

- File Entry (FILE. 008) 

1C01AH 

- ROOT Directory Entry 

3C021H 

- File Info (FILE. 008) 

1C03BH 

- Volume Label 

3C03AH 

- File Entry (FILE. 009) 

1C05CH 

- File Entry (FILE. 001) 



1C07DH 

- File Info (FILE. 001) 



1C096H 

- File Entry (FILE. 002) 



1C1B8H 

- File Entry (FILE. 007) 

3C15CH 

- File Entry (FILE. 014) 

1C1D9H 

- File Info (FILE. 007) 

3C17DH 

- File Info (FILE. 014) 

1C1F2H to 

1FF61H -Not Used 

3C196H to 

3FF73H -Not Used 

1FF68H 

- BAM (Extent for FILE. 007) 

3FF7AH 

- BAM (Extent for FILE. 014) 

1FFCEH 

- BAM (FE FILE. 002) 



1FFD4H 

- BAM (Extent for FILE. 001) 



1FFDAH 

- BAM (FI FILE. 001) 



1FFE0H 

- BAM (FE FILE. 001) 

3FFE0H 

- BAM (FE FILE. 009) 

1FFE6H 

- BAM (Volume Label) 

3FFE6H 

- BAM (Extent for FILE. 008) 

1FFECH 

- BAM (ROOT Directory) 

3FFECH 

- BAM (FI FILE. 008) 

1FFF2H 

- BAM (Boot Record) 

3FFF2H 

- BAM (FE FILE. 008) 

20000H 

- BAS (Logical Block 0) 

40000H 

- BAS (Logical Block 1...) 

NOTE: 

This layout assumes a flash card with 128-Kbyte erases blocks. The format divides each block by eight, resulting in seven 

16-Kbyte pseudo-files and a 16-Kbyte space for one data structure. 



Figure 6. Symmetric Format Example 
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Thus, a 2-Mbyte card would appear to FFS as a 2-MB 
drive with 112 16-Kbyte files, and to the embedded 
system as a storage space capable of holding 128 files, 
but every eighth file should be skipped. 

The code in Appendix A provides three procedures for 
formatting the card: InitialFormat, DoSymmetric and 
DoEntireCard. InitialFormat writes a Boot Record, 
ROOT Directory Entry and Volume Label to the card’s 
block zero. DoSymmetric performs the symmetric 
format described earlier. DoEntireCard is another 
variation on the Symmetric Block Format. This 
procedure formats the entire card as one large file. The 
reference code is described in the last section of this 
application note. 


5.0 EMBEDDED SYSTEM 
REQUIREMENTS 

The difference between a Symmetric Block Format in an 
embedded system and a full FFS implementation lies in 
the amount of FFS capability built into the embedded 
system. Deciding how much functionality to build into 
the embedded system can be associated with a “Kbyte 
per level of functionality” cost. Adding more FFS -like 
features requires larger embedded code. The following 
sections describe how to implement four fundamental 
FFS concepts based on MS-FFS data structures. 


5.1 Where to Put the Formatter 

Regardless of the amount of functionality desired, the 
key to the SBF lies in the format of the card. Formatting 
requires writing all of the data and allocation structures 
to the card before it’s used. A special formatter located 
either on a PC or on the embedded system itself writes 
the structure file data to the card. 

Using the formatter outside the embedded system and on 
the PC shrinks the size of the embedded code, but 
requires the extra handling of an external program. 

Designing the formatter into the embedded system 
increases the size of the embedded code, but insures that 
formatting and downloading can be done at the same 
location. 

Regardless of where the formatter is located, it must 
perform the same function: writing the necessary 
structures to convince ITS that files exist on the card. If 
all of the format data is known, a simple hex dump to 
the card at the proper address in each block can be used. 
This way, the computer doesn’t have to calculate where 


to place ail of the structures, it merely copies the 
numbers from internal storage to the card. However, 
having the format data in hardware makes it non- 
updateable. The other way to format requires a utility 
that prompts the user for the specific number of files and 
their size. This utility then calculates how to pack the 
structures into a small enough space in the block and 
displays to the user where the forbidden structure file 
locations exist. 


5.2 Writing to the Formatted Card 

Since all of the pseudo-file space created by the 
formatter exists in a contiguous region of flash, the 
embedded system needs to know how to avoid this 
forbidden region. This can be done two ways, depending 
on the read^write mechanism of the embedded system. 


The first method employs a protection algorithm that’s 
inserted into the embedded system’s normal write 
algorithm. Typically, a generic write algorithm would 
look something like Figure 7. When the embedded 
system decides to write a byte, it obtains the current 
address, calls the flash programming algorithm, and then 
increments the address. The protection algorithm, shown 
in Figure 8 avoids the region of space at the top of the 
block reserved for the structure file. Since the size of the 
structure file may vary, its location is determined by 
subtracting the size of the file from the block size. 
Reference code for these algorithms are located in 
Appendix A. 



Figure 7. Conventional Byte-Write Process 
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Figure 8. Byte-Write Protection Algorithm 






; Values defined before compile time, 
define BLOCK_SIZE = block size 

define BLOCK_BOUND = 2's complement of block size 

define IN_BLOCK = block size - 1 

define CHECK = block size - structure file size 

Assuming ebx = (32 -bit) address in the card about to be written to 


protec tion_check: 

mov eax, ebx ; Grab the current address 

and eax, IN_BLOCK ; Truncate the address to a single block 

sub eax, CHECK ; Subtract the distance to the structure file 

js write_flash ; If accumulator goes negative, we're safe 

and ebx, BLOCK_BOUND; Otherwise, mask the address to a block boundary- 
add ebx, BLOCK_SIZE ; and increment to the next block 

write_flash: 

callwrite_flash_byte 


Figure 9. Protection Code for Byte-by-Byte Writing 

Another way to write to the formatted card involves only be aware of what file number is being written. A 

using equally sized records. For example, a data logging 128-Kbyte erase block partitioned into 4-KB pseudo- 

device that needs to write a 4-KB record every so often files would have 32 file spaces, with every 32nd space 
can speed up the write process by eliminating the need being a structure file. By avoiding the 32nd space and 

to use protection code. Assuming the card has been writing 4 KB at a time, the embedded system would 

formatted to 4-KB file sizes, the embedded system need successfully write to the card. 
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Here is the code for file-oriented data writing on a 
record-by-record basis. Assuming 4-Kbyte records: 


define FILES_PER_BLOCK 

= Number of ( PseudoFiles + Structure 
block 

Files 

) / 

define FILE_SIZE 




cx 


= Next available filespace 's number 



f ind_f lash_start_address : 




mov 

ax, FILE_SIZE 

Put the pseudo-file size in AX 



mul 

cx 

Multiply AX by the current filespace 

's number 

callwrite_4kbytes_to_card 

Call the routine to write 4K to the 

found 

address 

inc remen t_to_next_f ile : 




inc 

cx 

Increment to next valid filespace 



mov 

ax, cx 

Move this number into AX 



mov 

bx, FILES_PER_BLOCK 

Prepare to do a modulus operation 



div 

bx 

Divide number of files by the current file 

number 

or 

dx, dx 

(Remainder in DX) 



jnz 

done 

Was the remainder Zero? 



inc 

cx 

Was the remainder Zero? 



done: 


Then skip this filespace 




Figure 9. Record-by-Record File-Oriented Data Writing 


In most instances, this is the maximum functionality the same format. The only way an embedded system can 

embedded system would need: insert a freshly formatted read data from the card is if it knows where the data is. 

card into the embedded machine, let it dump its data, A file pointer that references the start of a pseudo file 

and now the card can be inserted and read by any PC that the embedded system wishes to reference can be 

running FFS. obtained from the format information that the system has 

already been programmed to understand. If the data is a 
binary image (i.e., a large graphic picture taking up the 
6.0 READING FROM THE entire card), the same protection algorithm must be used 

FORMATTED CARD for reading as well as writing in order to recreate the file. 


6.1 Embedded System to an FFS- 6.3 FFS-Based PC to an Embedded 

Based PC System 

The entire process of writing data to the formatted card Since the write algorithm operates on the principle of 

enables any FFS-based PC the ability to read the data off permanent structure file space, a full FFS cannot .write to 

the card. This case has already been defined. a card - If the card is inserted into a PC running FFS, and 

a file is written to it, the format will be lost. Therefore, 
there is no direct way to write data from a PC to the 

6.2 Embedded System to Same formatted card using FFS. If a designer wishes to place 

TvD 0 of Embedded Svstem data into the Symmetric Block Format, it must be done 

^ * with a separate PCMCIA hex dump/editor utility. 

Passing data between two of the same embedded 
systems is quite simple, assuming they both expect the 
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7.0 REFERENCE CODE FOR DOS- 
BASED PCs 

When compiled, the reference code in this section will 
format the card to either of the following options: A 
Symmetric Format with a user-definable number of files, 
and an Entire Card Format which uses the entire space 
of the card as one large file. The formatter uses the DOS 
Generic IOCTL interface supplied by a PCMCIA 
Compliant Memory Card Device Driver. Intel’s 
iCardrvl, iCard2.9 and iCardrv3 all provide the Generic 
IOCTL services used here, as well as Card Drivers by 
Phoenix, AMI, SystemSoft and Award. These drivers 
must be loaded in CONFIG.SYS for this program to 
work properly. If iCardrvl or 2.9 is being used, this 
program will support Intel Series 1, 2 and 2+ Flash 
memory cards. Otherwise, the proper technology driver 
must be loaded. 

Although the low-level portion of this program is based 
on a DOS interface, these routines may be removed and 
replaced with other platform-specific low-level 
functions. The formatting concepts remain the same for 
all FFS based systems. 

The first thing the program does upon invocation is to 
obtain the card’s geometry: size, number of blocks, size 
of block, etc. This information will be used later to 
calculate how many structures will be needed to format 
the card. Next, the program prompts the user for a 
format selection. At this point, the user may select either 
a symmetric format or an entire card format. Selecting a 
symmetric format further queries the user as to the 
number of files per block. The program determines this 
range dynamically by computing the maximum and 
minimum amount of files that may be written to a block. 
Note, that this calculation is made to keep the structure 
file data within one file space. Depending on the 
implementation, the structure file space can be any size: 
it’s up to the implementation to tailor the embedded 
system to the format. The second option: Entire Card 
will format the entire card as one large file. Before the 
format is installed, the program will ask whether or not 
the card needs to be erased. 


The three reference code procedures of interest are: 
InitialFormat(), DoSymmetric() and DoEntireCard(). 
InitialFormat() places on the card the basic elements 
provided by an FFS Format: a Boot Record, ROOT 
Directory entry and a Volume Label. In reality, the 
Volume Label is optional and may be excluded from the 
format, but it’s included as an additional reference. Two 
important variables are initialized by this procedure: 
BottomPtr and BAMptr. BottomPtr references the base 
address of the structure file within that block. If the 
block size is 128 KB and the structure file is 8 KB, the 
BottomPtr would be 128 KB-8 KB or 1E000H. Each 
time a structure is added to the file, the BottomPtr 
increases by the size of the structure. A 25-byte File 
Info structure increases the BottomPtr by 25 bytes. Each 
time the formatter enters a new block, it resets the 
BottomPtr. The BAMptr always references the currently 
available BAM. Each time a new structure is written to 
the structure file, its BAM should be chosen using the 
BAMptr and then written with the function 
WriteBAM(). WriteBAM() calculates the correct address 
within the card to write the BAM. All the user needs to 
specify is the 32-bit BAM value and the structure 
containing the BAM’s data. Each time a BAM is used, 
BAMptr is incremented. If the next structure needs to be 
placed in the next block, BAMptr is incremented by 
10000H. 

DoSymmetric() takes the BAMptr and BottomPtr as well 
as the user-specified PseudoFileCount values and 
formats each block with x number of files. 
DoSymmetricO iterates through each block in the card 
(except the spare) and writes a File Entry and File Info 
structure for each file. The result of this format is a 
FEDE chain of File Entries. 

DoEntireCard() writes a single File Entry to block zero 
and multiple 32-KB file extents to each block, thus 
encapsulating the entire flash card as one file. The 
procedure does not use the PseudoFile values; instead, it 
uses the InfoCount value calculated by the program 
before calling this function. InfoCount indicates the 
number of File Info Structures required in each block 
based on the size of the block. 
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APPENDIX A 

FFS FILE IMAGE FORMATTER 


/*********************************************** * *.* *************************** 
* 

* FFS File Image Formatter 

* 

* Copyright (c) Intel Corporation, 1994 

* 

* Peter J Torelli/ James R. Massoni 

* . • " 

* Revision History: 

* 

* 1.00 First release: symmetric formatting only (PJT, 6-17-94) 

* 1.01 Added entire card capability. 

* 1.02 Modified program structure (JRM, 8-26-94) 

* 

* Future modifications: 

* 

* 1. Better error handling. 

* 2. Check for Card Driver 

* 3. Query IOCTLs first 

* Environment: 

* Borland C/C++ 3.1 IDE, Example: BCC -mh SBM.C 

* Huge Memory Model 

* Force pointers as "far" for DWORD compatibility 

* 

****************** * * *********** * * ************** * * ************** * * *********** * * 
PAGE 

************************************************* * * *********************** * * * j 


#include <conio.h> 
#include <ctype.h> 
#include <dos.h> 
#include <stdio.h> 
#include <stdlib.h> 
#include <string.h> 

# include "sbm.h" 
#include "sbm_msg.h" 

/* 

** Global Variables 
*/ 
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DWORD InfoCount=OUL; /* Number of Filelnfos for Entire Format */ 

DWORD ResidualSpace=OUL; /* Non 32K extent for Entire Card Format */ 

DWORD BottomPtr=OUL; /* Bottom of FFS Structure File */ 

DWORD BAMptr=OUL; /* Incremental BAM pointer */ 

DWORD StructureFileSize=OUL; /* Structure File Size */ 

DWORD PseudoFileSize=OUL; /* PseudoFile Size */ 

WORD PseudoFileCnt=0 ; /* Number of Pseudo Files */ 

BYTE DriveNumber=0; /* Current Drive number */ 

Cardlnfo Card; /* Current Card's Geometry */ 

union IOCTLDataPkt DataPkt; 

union IOCTLDataPkt *pDataPkt=ScDataPkt ; 

/* ■ - 1 "■ 

** Function Prototypes 
*/ 

WORD GenericIOCTL ( BYTE, union IOCTLDataPkt far *, BYTE ); 
void CommonWrite ( DWORD, BYTE'*, WORD ); 
void CommonRead ( DWORD, BYTE *, WORD ); 

WORD Log2 Phy ( WORD lblock ); 

void WriteBAM { DWORD, BlockAllocMember ) ; 

void WriteBAS { WORD, WORD, WORD ) ; 

void DoSymmetric ( void ) ; 

void DoEntireCard ( void ); 

void InitialFormat ( void ); 


/***************************************************************************** 

PAGE 

* ********************************************************** * * ★ * * * ★***★*★* * * * ★ * 

* 

* Title: Main 

* 

* Description: Entry point for Symmetric Block Manager. This utility 

* is used to format a flash PCMCIA card symmetrically so 

* data may be written to the card at pre-known addresses . 

* * * 

**************** ***************************************************** ******** f 

void main ( int argc, char *argv[] ) 

{ ' ■ ' ■ 

/* Calculation Values. */ 

DWORD Compares ize=0UL; 

WORD FileOverhead=0 ; 

WORD BaseOverhead=0 ; 

WORD TotalOverhead=0; 

WORD MinFiles=0; 

WORD MaxFiles=0; 

/* User Input. */ 

BYTE format_type=0; 

BYTE keypr e s s = 0 ; 

/* Initial Format fields. */ 

WORD f lags=0 ; 
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WORD block_ctr=0; 

fprintf ( stdout, LOGON_MSG , REVISION ); 

if ( argc < 2 ) 

{ 

fprintf ( stderr, SPECIFY_MSG ); 
fprintf ( stderr, USAGE_MSG ) ; 
exit ( 1 ) ; 

} 

else if ( argc > 2 ) 

{ ■ : 

fprintf ( stderr, TOO_MANY_MSG ); 
fprintf ( stderr, USAGE_MSG ); 
exit ( 1 ) ; 

} 

if ( ( ( DriveNumber=toupper (argv[l] [0] ) - ' A' +1 ) < 1 ) || 

( DriveNumber > 26 ) ) 

{ 

fprintf ( stderr, INVL_DRV_LET_MSG ); 
fprintf ( stderr, USAGE_MSG ); 
exit ( 1 ) ; 

} 

/* Get Card Size Metrics. */ 
fprintf ( stdout, OBTAINING_MSG ); 

pDataPkt->MediaInfo.Len=sizeof ( pDataPkt->MediaInfo ); 
GenericIOCTL ( DriveNumber, pDataPkt, MEDIA_INFO ); 

Card . BlockSize=pDataPkt->MediaInf o . BlockSize ; 

Card. Size=pDataPkt->MediaInfo . PartSize; 

Card. NumBlocks= (DWORD) Card. Size / (DWORD) Card. BlockSize; 

fprintf ( stdout, CHOOSE_MSG ); 
format_type=toupper (getche ( ) ) ; 
fprintf ( stdout, DBL_CRLF_MSG ); 

switch ( format_type ) { 
case SYMMETRIC: { 

/* Calculate min/max number of symmetric files. */ 
MinFiles = (DWORD) Card. BlockSize / 0x8000; 
MaxFiles = 0; 

/* Determine the base overhead. */ 

BaseOverhead = sizeof ( BlockAllocStruct ) + 
sizeof( BootRecord ) + 
sizeof ( BlockAllocMember ) + 
sizeof ( DirectoryEntry ) + 
sizeof ( BlockAllocMember ) + 
sizeof ( FileEntry ) + 
sizeof ( BlockAllocMember ); 

/* Determine the amount of overhead per file. */ 
FileOverhead = sizeof ( FileEntry ) + 
sizeof ( BlockAllocMember ) + 
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sizeof( Filelnfo ) + 
sizeof ( BlockAllocMember ) + 
sizeof( BlockAllocMember ); 

/* Do a max/min calculation to determine the number 
of files per block based on block size. */ 

do { 

MaxFiles++; 

TotalOverhead = ( MaxFiles * FileOverhead ) + 
BaseOverhead; 

Compares ize = 

DWORD) ( (DWORD) Card. BlockSize) / ( (DWORD) MaxFiles) ; 

} while ( CompareSize > TotalOverhead ); 

MaxFiles — ; 

/* Offer the user a range to choose from. */ 

fprintf ( stdout, NUM_PFILES_MSG, MinFiles, MaxFiles ) ; 

scanf ( "%d", &PseudoFileCnt ); 

fflush( stdin ) ; 

fprintf ( stdout, CRLF_MSG ); 

/* Calculate the Pseudo File Size. */ 

PseudoFileSize= (DWORD) Card. BlockSize / PseudoFileCnt ; 

StructureFileSize=PseudoFileSize; 

BottomPtr=Card.BlockSize-StructureFileSize; 

break; 


case ENTIRE: { 

/* Calculate the Base Overhead */ 

BaseOverhead = sizeof ( BlockAllocStruct ) + 

sizeof ( BootRecord ) + sizeof ( BlockAllocMember ) + 
sizeof ( DirectoryEntry ) + 
sizeof ( BlockAllocMember ) + 

sizeof ( FileEntry ) + sizeof ( BlockAllocMember ) + 
sizeof ( FileEntry ) + sizeof ( BlockAllocMember ); 

/* Determine how many 32k extents fill a block.*/ 

InfoCount = (DWORD) Card. BlockSize / 0x8000; 

/* Determine how many File Infos would be needed to store those 
** extents. Each FI has an FI struct, FI BAM and 
** Extent BAM. */ 

FileOverhead = InfoCount * ( sizeof ( BlockAllocMember ) + 
sizeof ( Filelnfo ) + 
sizeof ( BlockAllocMember ) ); 

/* Combine the two overheads to determine the structure file 
** size. */ 

StructureFileSize=BaseOverhead + FileOverhead; 

/* The last extent of each block is some # less than 32k. */ 
ResidualSpace=0x8000-StructureFileSize; 

/* Adjust the bottom pointer. */ 
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BottomPtr=Card.BlockSize-StructureFileSize; 

/* The file is the size of the card minus all structure 
** files. */ 

PseudoFileSize=BottomPtr * (Card,NumBlocks-l) ; 

PseudoFileCnt=l ; 

break; , 

} 

default: { 

fprintf ( stdout , INVL_SELECT_MSG ); 
exit (1) ; 

} • •. 

} 

fprintf ( stdout, ERASE_PROMPT_MSG ); 
keypress = toupper ( getcheO 
fprintf ( stdout, CRLF_MSG ) ; 
if ( keypress == YES ) 

{ 

fprintf ( stdout/ PLEASE_WAIT_MSG ); 

GenericIOCTM DriveNumber , pDataPkt/ ERAS E_DR I VE ); 
fprintf ( stdout, DONE_MSG ); 

}, ' - ■ : .. 

fprintf ( stdout, CRLF_MSG ); 

/* Write BASs . */ 
block_ctr=0 ; 

fprintf ( stdout/ WRITE_BAS_MSG , block_ctr ); 
while ( block_ctr < Car d.NumB locks ) { 
if ( block_ctr == 0 ) { 
flags | = BOOT_RECORD ; 

} . , , . ,, 

if ( block_ctr+l == Card.NumBlocks ) { 
flags |= SPARE_BLOCK; 

} 

WriteBAS ( block_ctr/ block_ctr/ flags ); 

f lags=0; 

block_ctr++; 

fprintf( stdout/ "%c%c%c%c%03Xh" / 8 , 8 / 8 / 8 / block_ctr ); 

} 

fprintf ( stdout, DOT_DONE_MSG ); 

/* Lay down initial format. */ 

InitialFormat ( ) ; , 

/* Do the specific format. */ 
switch ( forma t_type) { 
case SYMMETRIC: { 

DoSymmetric ( ) ; 

/* Reset the drive so our format info is recognized by DOS. */ 
fprintf ( stdout/ RESET_MEDIA_MSG ); 

GenericIOCTL ( DriveNumber/ pDataPkt/ MEDIA_CHANGE ); 
fprintf ( stdout/ DOT_DONE_MSG ) ; 

/* Display the format information. */ 
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fprintf ( stdout , SYMM_INFO_MSG, 

((DWORD) PseudoFileCnt * (Card.NumBlocks-1) ) - 
(Card.NumBlocks-1 ) , 

Card.NumBlocks-1, ( (DWORD) PseudoFileCnt * (Card.NumBlocks-1) ) , 
(DWORD) PseudoFileSize/1024 , Card. BlockSize-StructureFileSize, 
Card.BlockSize-1 ) ; 
break; 

> 

case ENTIRE: { 

DoEntireCard( ) ; 

/* Reset the drive so our format info is recognized by DOS. */ 
fprintf ( stdout, RESET_MEDIA_MSG ); 

GenericIOCTL ( DriveNumber , pDataPkt, MEDIA_CHANGE ); 
fprintf ( stdout, DOT_DONE_MSG ); 

/* Display the format information. */ 

fprintf ( stdout, ENTIRE_INFO_MSG , ((DWORD) PseudoFileCnt), 
Card.NumBlocks-1, (DWORD) PseudoFileSize/1024 , 
Card.BlockSize-StructureFileSize, Card. BlockSize-1 ); 
break; 

} 

default: break; 

} 

} 

/***************************************************************************** 

PAGE 

****************************************************************************** 

* 

* Title: GenericIOCTL 

* 

* Description: This procedure invokes a DOS generic IOCTL 440Dh. 

* 

*****************************************************************************/ 

WORD GenericIOCTL ( BYTE DriveNumber, union IOCTLDataPkt far *pPkt, BYTE Code ) 

{ 

union REGS inregs , outregs ; 
struct SREGS sregs; 

WORD ReturnAX=0 ; 

inregs . x . ax=GENERIC_IOCTL ; 

inregs . h . bl= DriveNumber ; 

inregs.h.bh=0; 

inregs.h.ch=DISK_DRIVE; 

inregs.h.cl=Code; 

inregs .x.dx=FP_OFF (pPkt) ; 

sregs. ds=FP_SEG (pPkt) ; 

ReturnAX=intdosx ( &inregs , &outregs , &sregs ) ; 
if ( outregs .x.c flag ) 

fprintf ( stderr , ERROR_MSG ); 
return ( outregs .x. cf lag ? ReturnAX : 0 ); 
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****************************************************************************** 

* 

* Title: CommonWrite 

★ ■ 

* Description: Common memory write procedure. 

* 

***************************************************************************** j 

void CommonWrite ( DWORD to, BYTE *data, WORD length ) 

{ 

pDataPkt~>CommonMemWrite.Len=length; 
pDataPkt->CommonMemWrite .Of fset=to; 
pDataPkt->CommonMemWrite . PtrBuf fer=data; 

GenericIOCTL ( DriveNumber, pDataPkt, COMM_WRITE ); 

} 

/***************************************************************************** 

PAGE 

****************************************************************************** 

* 

* Title: CommonRead 

* 

* Description: Common memory read procedure. 

* 

******************* * * ****************************** * * ************************ j 

void CommonRead ( DWORD to, BYTE *data, WORD length ) 

{ 

pDa taPkt - >CommonMemRead . Len= length ; 
pDataPkt->CommonMemRead.Of fset=to; 
pDataPkt->CommonMemRead . PtrBuf f er =data ; 

GenericIOCTL ( DriveNumber, pDataPkt, COMM_READ ) ; 

> 

/***************************************************************************** 

PAGE 

****************************************************************************** 

* 

* Title: Log2Phy 

* 

* Description: This procedure converts a logical block number to a 

* physical one by reading each BAS sequence number. 

* 

*****************************************************************************/ 

WORD Log2 Phy ( WORD lblock ) 

{ 

BlockAllocStruct CurBAS; 

DWORD address=OUL; 

WORD block=l ; 

/* Mustn't try to read a block that doesn't exist. */ 
if (lblock>=Card.NumBlocks) return (ERROR); 

/* Read each BAS. */ 
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while ( block <= Card.NumBlocks ) 

{ 

address = (DWORD) block * (DWORD) Card. BlockSize; 
address-=sizeof ( BlockAllocStruct ); 

CommonRead( address, pBYTE &CurBAS, sizeof( BlockAllocStruct ) ); 

if( CurBAS.BlockSeq == lblock ) return block; 

block++; 

} 

return (ERROR) ; 




PAGE 




* 

* Title: WriteBAM 

* 

* Description: This procedure writes the current BAM to the location 

* specified by the BAM pointer. The actual physical 

* address of the BAM is derived from the BAM pointer. 

*****************************************************************************^ 


void WriteBAM ( DWORD BAMptr, BlockAllocMember CurBAM ) 

{ 

WORD block; 

DWORD address; 


block=Log2Phy ( (DWORD) BAMptr » 16 ); 
address=block*Card. BlockSize; 
address-=sizeof ( BlockAllocStruct ); 

address-=( ( ( BAMptr & OxFFFF ) + 1 ) * sizeof ( BlockAllocMember ) ); 
CommonWrite ( address, pBYTE &CurBAM, sizeof ( BlockAllocMember ) ); 


PAGE . 






* 

* Title: WriteBAS 

* , 

* Description: This procedure writes a BAS to a physical block. The 

* lblock value assigns the physical block it's unique logical 

* number. The flags field determines whether or not the 

* block is spare, and if the boot record is present. 

* 




/ 


void WriteBAS ( WORD LogBlock, WORD PhyBlock, WORD Flags ) 

{ 

DWORD CurAddr es s = OUL ; 

BlockAllocStruct CurBAS; 


CurBAS . BootRecordPtr =FNULL ; 
CurBAS . EraseCount=69 ; 

CurBAS . BlockSeq=LogBlock; 
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Cur BAS . BlockSeqChecksum=CurBAS .BlockSeq A OxFFFF; 

CurBAS . Status=0xC3FF; 

/* Make Spare Block Modifications */ 
if ( Flags & SPARE_BLOCK ) 

{ 

CurBAS . BlockSeq=OxFFFF ; 

CurBAS . BlockSeqChecksum=OxFFFF; 

CurBAS . Status =0xFFF3 ; 

} 

/* Make Boot Record Modifications. */ 
if ( Flags & BOOT_RECORD ) 

{ 

CurBAS . BootRecordPtr= ( (DWORD) LogBlock«16 ) +0 ; 

CurBAS . Status=0xC3FE; 

} 

/* Calculate where to write the BAS. */ 

CurAddress= ( ( ( PhyBlock+1 ) * Card.BlockSize )-sizeof( BlockAllocStruct )); 
CommonWrite ( CurAddress, pBYTE &CurBAS, sizeof( BlockAllocStruct ) ); 

} 

/***************************************************************************** 

PAGE 

********************************************************** * * ****************** 
★ 

* Title: DoSymmetric 

★ 

* Description: Symmetric formatter procedure. It writes x number of 

* pseudo files per block as specified by the user in main() . 

* 

*****************************************************************************/ 

void DoSymmetric ( void ) 

{ 


DWORD 

pf ile_num=0; 

/* 

Current File Number. */ 

WORD 

block_ctr=0; 


/* Current block. */ 

WORD 

f ile_ctr=0; 

/* 

Current File Counter. */ 

DWORD 

CurrentBase=OUL; 

/* 

Base address of current block 

BYTE 

tempname [8] ; 

/* 

Temporary extension field. */ 


BlockAllocMember BAM; 

FileEntry FE; 

Filelnfo FI; 

fprintf ( stdout/ WRITE_PSEUDO_MSG, pfile„num ); 

/* Begin writing the pseudo files for each block. */ 
while ( block_ctr < (Card.NumBlocks-1) ) 

{ 

file_ctr=0; 

/* Calculate the physical base of the block. */ 

Cur rentBase= (DWORD) Card.BlockSize * block_ctr; 

/* The BottomPtr of the structure file is initially set from 
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** the InitialFormat procedure. */ 
if ( block_ctr > 0 ) 

{ 

/* If this isn't block zero, then recalculate the new 
BottomPtr. */ 

BottomPtr= (DWORD) Card. BlockSize-PseudoFileSize; 
BAMptr= (DWORD) block_ctr « 16; 


/* For each block, write x number of PseudoFiles. */ 
while ( file_ctr < (PseudoFileCnt - 1) ) 

{ 

/* Write FileEntry BAMs . */ 

BAM. Status =0x3 F; 

BAM. Of f set [ 0 ] =BottomPtr&0xFF ; 

BAM. Offset [1] = (BottomPtr»8) &0xFF; 

BAM. Offset [2 ] = (BottomPtr»16) &0xFF; 
BAM.Len=sizeof ( FileEntry ); 

WriteBAM ( BAMptr , BAM ); 

BAMptr++ ; 

/* Write File Entry. */ 

FE.Status=0x00A7; 

/* Last PseudoFile? */ 

if ( (file_ctr+l) == (PseudoFileCnt-1) ) 

{ 

/* Last block? */ 

if( block_ctr == ( Car d.NumB locks - 2 ) ) 

{ 

FE . SiblingPtr=FNULL; 

FE . Status=0x00E7 ; 

} 

else 

{ 

FE . SiblingPtr= ( (DWORD) ( block_ctr + 1 ) 

« 16 ) ; 

} 

} 

else 

{ 

FE . SiblingPtr=BAMptr+2 ? 

} 

FE . Pr imaryPtr=BAMptr ; 

FE. SecondaryPtr=FNULL; 

FE. Attributes=0x00 ; 

FE.Time=0x8800; 

FE . Date=0x02F4 ; 

FE. VarStructLen=0 ; 

FE.NameLen=0x0B; 

sprintf ( tempname, "%081d", pfile_num ); 
strncpy( FE.Name, tempname, 8 ); 
strncpy( FE.Ext, "BIN", 3 ); 

CommonWrite( BottomPtr+CurrentBase, pBYTE &FE, 
sizeof ( FileEntry ) ) ; 

BottomPtr+=sizeof ( FileEntry ); 
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/* Write Filelnfo BAMs . */ 

BAM. Status=0x3F; 

BAM. Of fset [0] =BottomPtr & OxFF; 

BAM. Offset [1] = ( BottomPtr » 8 ) & OxFF; 

BAM. Of fset [2 ] = ( BottomPtr >> 16 ) & OxFF; 

BAM.Len=sizeof ( Filelnfo ); 

WriteBAM ( BAMptr, BAM ); 

BAMptr++ ; 

/* Write File Info Structures. */• 

F I . S ta tus = OxFCBB ; 

FI . ExtentPtr=BAMptr ; 

FI . PrimaryPtr=FNULL; 

FI . SecondaryPtr=FNULL; 

FI . Attributes=0x00 ; 

FI.Time=0x8800; 

FI.Date=0x02F4; 

FI . VarStructLen=0 ; 

FI .UncompressedExtentLen=PseudoFileSize; 

FI . CompressedExtentLen=PseudoFileSize; 

CommonWrite( BottomPtr+CurrentBase, pBYTE &FI, 
sizeof( Filelnfo ) ); 

BottomPtr+=sizeof ( Filelnfo ); 

/* Write Extent BAMs */ 

/* Last BAM in block? */ 

if ( (f ile_ctr+l) == (PseudoFileCnt-1) ) BAM. Status =0xBF; 
else BAM. Status=0x3F; 

BAM. Of fset [0] = ( (DWORD) PseudoFileSize* f ile_ctr ) &0xFF; 

BAM. Of fset [1] = ( ( (DWORD) PseudoFileSize*f ile_ctr ) »8)&0xFF; 
BAM. Of fset [2 ] = ( ( (DWORD) PseudoFile'Size*f ile_ctr ) »16) &0xFF; 
BAM.Len=PseudoFileSize; 

WriteBAM ( BAMptr, BAM ) ; 

BAMptr++ ; 

/* Update the display. */ 
pf ile_num++; 

fprintf ( stdout, " %c%c%c%c%c%5d" , 8 , 8 , 8 , 8 , 8 , pf ile_num ); 
f ile_ctr++; 

} 

block_ctr++; 

} 

fprintf ( stdout, DOT_DONE_MSG ); 


PAGE 


* Title: DoEntireCard 

* 

* Description: This procedure formats the entire card as one huge file. 

* It creates InfoCount number of File Info's and Extents in 

* each block's structure file space. 

* 

****************************************************** * * ********************* j 
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void DoEntireCard ( void ) 

{ 

WORD block_ctr=0; /* Block counter. */ 

WORD info_ctr=0; /* FI counter. */ 

DWORD CurrentBase=OUL; /* Current structure file address in 

block.*/ 

BlockAllocMember BAM; 

FileEntry FE; 

Filelnfo FI; 

fprintf ( stdout, WRITING_FILE_MSG ); 

/* We only need one file entry structure. */ 

/* Write FileEntry BAM. */ 

BAM. Status=0x3F; 

BAM. Of f set [ 0 ] =BottomPtr&OxFF; 

BAM. Of f set [ 1] = (BottomPtr»8) &0xFF; 

BAM. Offset [2] = (BottomPtr>>16 ) ScOxFF; 

BAM.Len=sizeof ( FileEntry ); 

WriteBAM ( BAMptr , BAM ); 

BAMptr++; 

/* Write File Entry. */ 

FE . S ibl ingP tr =FNULL ; 

FE.Status=0x00E7; 

FE . PrimaryPtr=BAMptr ; 

FE . SecondaryPtr=FNULL ; 

FE. Attributes=0x00 ; 

FE.Time=0x8800; 

FE . Date=0x02F4 ; 

FE . VarStructLen=0 ; 

FE . NameLen=DOS 8 3 ; 

strncpy( FE.Name, "00000001", 8 ); 
strncpy( FE.Ext, "BIN", 3); 

CommonWrite ( BottomPtr+CurrentBase, pBYTE &FE, sizeof( FileEntry ) ); 
BottomPtr+=sizeof ( FileEntry ); 

/* Loop through the blocks. */ 
while ( block_ctr < ( Card. NumB locks - 1 ) ) { 

info_ctr=0; 

/* Calculate the physical base of the block. */ 

CurrentBase= (DWORD) Card.BlockSize * block_ctr; 

/* The BottomPtr of the structure file is initially set from 
** the InitialFormat procedure. */ 
if ( block_ctr > 0 ) 

{ 

/* If this isn't block zero, then recalculate the new 
BottomPtr. */ 

BottomPtr= (DWORD) Card.BlockSize-StructureFileSize; 

BAMptr= (DWORD) block_ctr « 16; 

} 

/* For each block, write x number of InfoCounts. */ 
while ( info_ctr < InfoCount ) { 
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/* Write Filelnfo BAMs . */ 

BAM. Status=0x3F; 

BAM. Offset [0]=BottomPtr & OxFF; 

BAM. Of fset [1] = ( BottomPtr » 8 ) & OxFF; 

BAM. Offset [2 ] = ( BottomPtr » 16 ) & OxFF; 

BAM. Len=sizeof ( Filelnfo ); 

WriteBAM ( BAMptr , BAM ); 

BAMptr++; 

/* Write File Info Structures. */ 

FI . Status =0xFCAB; 

FI . ExtentPtr=BAMptr ; 

/* Last file info? */ 

if ( info_ctr == ( InfoCount - 1 ) ) 

{ 

/* Last block? */ 

if ( block_ctr == ( Car d.NumB locks - 2 ) ) 

{ 

FI . Pr imaryPtr =FNULL ; 

FI . S ta tus = OxFCBB ; 

} 

else 

{ 

FI . PrimaryPtr= ( (DWORD) ( block_ctr + 1 )' 

« 16 ) ; 

} 

} 

else 

{ 

FI . Pr imaryPtr =BAMptr+l ; 

} 

FI . SecondaryPtr=FNULL; 

FI . Attributes=0x00 ; 

FI . Time=0x8800 ; 

FI.Date=0x02F4; 

FI . VarStructLen=0 ; 

/* Last File Info in block ? */ 
if ( info_ctr == ( InfoCount - 1 ) ) 

{ 

FI . UncompressedExtentLen=Residual Space ; 

FI . CompressedExtentLen=ResidualSpace ; 

} 

else 

{ 

FI .UncompressedExtentLen=0x8000 ; 

FI .CompressedExtentLen=0x8000; 

} 

CommonWrite ( BottomPtr+CurrentBase, pBYTE &FI, sizeof ( 
Filelnfo ) ) ; 

BottomPtr+=sizeof ( Filelnfo ); 
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if ( info_ctr == ( InfoCount - 1 ) ) 
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{ 

BAM. Status=OxBF; 

BAM . Len=Re s i dua 1 Spac e ; 

} 

else 

{ 

BAM. Status=0x3F; 

BAM . Len= 0x8 000; 

} 

BAM. Offset [0] = ( (DWORD) 0x8000*inf o_ctr ) &0xFF ; 

BAM. Offset [1] = ( (DWORD) 0x8000*inf o_ctr»8 ) &0xFF ; 

BAM. Offset [2] = ( (DWORD) 0x8000*info_ctr»16 ) &0xFF; 

WriteBAM( BAMptr , BAM ) ; 

BAMptr++; 

info_ctr++; 

} 

block_ctr++; 

} 

fprintf ( stdout, DOT_DONE_MSG ); 

} 

/***************************************************************************** 

PAGE 

****************************************************************************** 

* 

* Title: InitialFormat 

* 

* Description: This procedure places a Boot Record, ROOT Directory and 

* Volume Label in block zero (at address BottomPtr) of the 

* card. 

* 

***************************************************************************** ^ 

void InitialFormat ( void ) 

{ 

/* Initial Format Structures. */ 

BlockAllocMember BAM; 

FileEntry FE; 

DirectoryEntry DE; 

BootRecord BR; 

/* Write Boot Record BAM in Physical Block Zero. */ 

BAM. Status=0x3F; 

BAM. Offset [0] =BottomPtr & OxFF; 

BAM. Offset [1]=( BottomPtr » 8 ) & OxFF; 

BAM. Of f set [2 ] = ( BottomPtr » 16 ) & OxFF; 

BAM.Len=sizeof ( BootRecord ); 
fprintf ( stdout , WRI TE_BAM_MSG ); 

WriteBAM ( BAMptr, BAM ); 

BAMptr++; 

fprintf ( stdout, DONE_MSG ); 

/* Write Boot Record in physical block zero. */ 

BR. Signature=0xFlA5; 

BR. SerialNumber=0x66677788UL; 

BR . FFSWr i teVers ion=FFS_WRITE_VER ; 
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BR . FFSReadVersion=FFS_READ_VER; 
BR.TotalBlockCount=Card.NumBlocks; 

BR . SpareBlockCount=l ; 

BR . BlockLen=Card . BlockSize ; 

BR . RootDirec toryPtr=BAMptr ; 

BR. Status =0xFFFF; 

BR . BootCodeLen=Q ; 

fprintf ( stdout, WRITE_BOOT_MSG ); 

CommonWrite ( BottomPtr, pBYTE &BR, sizeof ( BootRecord ) ); 
BottomPtr+=sizeof ( BootRecord ) ; 
fprintf ( stdout, DONE_MSG ); 

/* Write ROOT Directory BAM in physical block zero. */ 

BAM. Status =0x3 F; 

BAM. Offset [0] =BottomPtr & OxFF; 

BAM. Offset [1]=( BottomPtr » 8 ) & OxFF; 

BAM. Offset [2] =( BottomPtr » 16 ) & OxFF; 

BAM.Len=sizeof ( DirectoryEntry ); 
fprintf ( stdout, WRITE_ROOT_BAM_MSG ); 

WriteBAM ( BAMptr , BAM ); 

BAMptr++; 

fprintf ( stdout, DONE_MSG ); 

/* Write ROOT Directory Entry. */ 

DE . Status=0xFFE3 ; 

DE . S ibl ingP tr =FNULL ; 

DE . Pr imaryPtr =BAMptr ; 

DE . SecondaryPtr =FNULL ; 

DE . Attributes=0xl0 ; 

DE . Time=0x8 800; 

DE . Date=0x02F4 ; 

DE.VarStructLen=0; 

DE.NameLen=DOS83 ; 
strncpy( DE.Name , "ROOT ", 8) ; 
strncpy{ DE . Ext , " ", 3); 

fprintf ( stdout, WRITE_ROOT_MSG ); 

CommonWrite ( BottomPtr, pBYTE &DE, sizeof ( DirectoryEntry ) ) 
BottomPtr+=sizeof ( DirectoryEntry ) ; 
fprintf ( stdout, DONE_MSG ); 

/* Write Volume Label BAM in physical block zero. */ 

BAM. Status=0x3F; 

BAM.Of f set [0] =BottomPtr & OxFF; 

BAM. Offset [1]=( BottomPtr » 8 ) & OxFF; 

BAM. Offset [2 ] = ( BottomPtr » 16 ) & OxFF; 

BAM.Len=sizeof ( FileEntry ); 
fprintf ( stdout, WRITE_VOL_BAM_MSG ); 

WriteBAM ( BAMptr, BAM ); 

BAMptr++; 

fprintf ( stdout, DONE_MSG ); 

/* Write Volume Label Entry. */ 

FE . Status=0x00B7 ; 

FE. SiblingPtr=BAMptr ; 

FE . Pr imaryPtr=FNULL ; 

FE . SecondaryPtr =FNULL ; 


92 



AP-603 


iny 


FE . Attributes=0x28 ; 

FE . Time=0x8 800; 

FE . Date=0x02F4 ; 

FE . VarStructLen=0 ; 

FE . NameLen=DOS 8 3 ; 

strncpy (FE.Name, "EMBEDDED" , 8) ; 

strncpy ( FE . Ext , " FFS " , 3 ) ; 

fprintf ( stdout, WRITE_VOLUME_MSG ); 

CommonWrite ( BottomPtr, pBYTE &FE, sizeof ( FileEntry ) ); 
BottomPtr+=sizeof ( FileEntry ) ; 
fprintf ( stdout, DONE_MSG ); 


/* End of File: SBM.C 

** COPYRIGHT (c) 1994 Intel Corporation, ALL RIGHTS RESERVED 
********■**■***■*•*•*•***************■***************■*****•********■**★*************/ 
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/***************************************************************************** 

* 

* FILE NAME: SBM.H 

★ 

* PURPOSE: Defines, Typedefs, and Structures for file Symmetric Block 

* Manager . 

* 

* AUTHOR: Peter J Torelli/ James R. Massoni 

* 

* COPYRIGHT (c) 1994 Intel Corporation, ALL RIGHTS RESERVED 

* 

***************************************************************************** j 

#ifndef SBM.H /* Has this file been included before? .*/ 

# define SBM.H /* No, remember it has been now */ 

/* 

* * Defines **************************************************************** 

*/ 

# define 
# define 
# define 
# define 
# define 
# define 
#def ine 
# define 
# define 
# define 
# define 
#define 
#def ine 
ttdefine 
#def ine 
#define 
#define 
#def ine 
# define 

/* 

* * Typede fs **************************************************************** 
*/ 


REVISION 1.02 
BOOT_RECORD 0x01 
COMM_READ 0x71 
COMM_WRITE 0x51 
DISK_DRIVE 0x08 
DOS 8 3 OxOB 

ENTIRE 'E' 

ERASE_DRIVE 0x54 
ERROR -1 

FFS_READ_VER 0x200 
FFS_WRITE_VER 0x200 
FNULL OxFFFFFFFFUL 

GENERIC_IOCTL 0x440D 
MEDIA_CHANGE 0x52 
MEDIA_INFO 0x73 
S PARE_BLOCK 0x02 
SYMMETRIC 'S' 

YES ' Y ' 

pBYTE (BYTE *) 


typede f unsigned char BYTE; 
typedef unsigned int WORD; 
typedef unsigned long DWORD; 

typedef struct { 

DWORD Size; 

DWORD BlockSize; 

WORD NumBlocks ; 

} Cardlnfo; 

typedef struct { 

BYTE Status; 
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BYTE Offset [3 ] ; 

WORD Len; 

} BlockAllocMember ; 

typedef struct { 

DWORD BootRecordPtr; 

DWORD EraseCount; 

WORD BlockSeq; 

WORD BlockSeqChecksum; 

WORD Status ; 

} BlockAllocStruct; 

typedef struct { 

WORD Signature; 

DWORD SerialNuinber ; 

WORD FFSWrit eVersion; 

WORD FFSReadVersion; 

WORD TotalBlockCount; 

WORD SpareBlockCount; 

DWORD BlockLen; 

DWORD RootDirectoryPtr; 

WORD Status; 

WORD BootCodeLen; 

/* BYTE BootCode [0] ; Boot Code is ZERO. */ 
} BootRecord; 

typedef struct { 

WORD Status; 

DWORD SiblingPtr ; 

DWORD PrimaryPtr; 

DWORD SecondaryPtr; 

BYTE Attributes; 

WORD Time; 

WORD Date ; 

WORD VarS true t Len; 

BYTE NameLen ; 

BYTE Name [ 8 ] ; 

BYTE Ext [ 3 ] ; 

} FileEntry, DirectoryEntry; 

typedef struct { 


WORD 

Status; 

DWORD 

ExtentPtr; 

DWORD 

PrimaryPtr; 

DWORD 

SecondaryPtr ; 

BYTE 

Attributes; 

WORD 

Time ; 

WORD 

Date ; 

WORD 

VarStructLen; 

WORD 

UncompressedExtentLen; 

WORD 

Compress edExtentLen; 

} Filelnfo; 


** Unions and Structures ★★**********★******★***★*★*★*★★****★*★***★********★ 
*/ 

I 
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union IOCTLDataPkt{ 

struct EraseDrive { 

BYTE Status; 

} ED; 

struct CommonMemReadWritePkt { 
BYTE Status; 

WORD Len; 

DWORD Offset; 

BYTE far *PtrBuffer; 

} CommonMemRead, CommonMemWrite; 


struct MedialnfoPkt { 


BYTE 

Status; 

BYTE 

Len; 

BYTE 

DevType ; 

WORD 

JedecID; 

BYTE 

DriveSlot; 

BYTE 

TotalSlots; 

BYTE 

PartType; 

DWORD 

PartBegin; 

DWORD 

PartSize; 

DWORD 

MediaSize; 

DWORD 

BlockSize; 

BYTE 

PartNum; 

BYTE 

CurPartlnSlot ; 

BYTE 

MaxPar tins lot ; 

BYTE 

TotPartlnSlot; 

BYTE 

DevInfoNum; 

BYTE 

DevInfoSize; 

void far *DevInfoPtr; 

WORD 

InitYear; 

BYTE 

InitMonth; 

BYTE 

InitDay; 

BYTE 

Ini t Hour; 

BYTE 

InitSec; 

WORD 

BatRepYear; 

BYTE 

BatRepMonth; 

BYTE 

BatRepDay; 

WORD 

BatExpYear; 

BYTE 

BatExpMonth; 

BYTE 

BatExpDay; 

WORD 

Flags; 

BYTE 

VendorName [11] 

WORD 

ChangeCount ; 

DWORD 

Reserved[5] ; 

} Medialnfo; 


#endif 

/* End of File: SBM.H 

** COPYRIGHT (c) 1994 Intel Corporation, ALL RIGHTS RESERVED 
******************************** *********************************************/ 
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y******************************************************************** *•*■★★★■*■•*■*'* 
* 

* FILE NAME: SBM_MSG . H 

* 

* PURPOSE: Defines, Typedefs, and Structures for file Symmetric Block 

* Manager . 

* 

* AUTHOR: Peter J Torelli/ James R. Massoni 

* 

* COPYRIGHT (c) 1994 Intel Corporation, ALL RIGHTS RESERVED 

* 

*****************************************************************************/ 


#ifndef SBM_MSG . H /* Has this file been included before? */ 

#define SBM_MSG.H /* No, remember it has been now. */ 


/* 

*/ 


#define CHOOSE_MSG "Done\n\nChoose a format: \n\t (S)ymmetric\n\t (E)ntire\ 

Card as One File\n\nSelection (S/E) : " 


#def ine CRLF_MSG 
#def ine DBL_CRLF_MSG 
#def ine DONE_MSG 
#def ine DOT_DONE_MSG 
#def ine ERASE_PROMPT_MSG 


" \n" 

" \n\n" 

"Done . \n" 

" . . .Done. \n" 

"Note: The media must be erased beforeX 


formatting. XnDoes this media need to be erased? (y/n) : " 


#define OBTAINING_MSG "Obtaining media geometry. . . " 

#define LOGON_MSG "LFM Linear File Formatter v% . 2f (c) IntelX 

Corporation\n\n " 


#def ine NUM_PFILES_MSG 
#def ine PLEAS E_WAIT_MSG 
#def ine RESET_MEDIA_MSG 
#def ine WRITE_BAM_MSG 
#def ine WRITE_BAS_MSG 
#def ine WRITE_BOOT_MSG 
#def ine WRITE_PSEUDO_MSG 
#def ine WRITE_ROOT_MSG 
zero. . . " 


"Enter the number of PseudoFiles /Block [%d-%d] : " 
"XnPlease wait, media being erased..." 

"Resetting media" 

"Writing Boot Record BAM in physical block zero. . . 
"Writing BAS block %03Xh" 

"Writing Boot Record in physical block zero..." 
"Writing Pseudo File number %05d" 

"Writing ROOT Directory Entry in physical blockX 


#def ine WRITE_ROOT_BAM_MSG 
#def ine WR I T E_V 0 L_B AM_MS G 
#def ine WRITE_VOLUME_MSG 
#def ine WRITING_FILE_MSG 


"Writing ROOT BAM in physical block zero..." 

"Writing Volume Label BAM in physical block zero..." 
"Writing Volume Label in physical block zero..." 
"Writing File. . . " 


/* Define the format symmetric block screen */ 
#def ine SYMM_INFO_MSG " \n\ 

Symmetric Preformat installed. \n\n\ 

Number of Pseudo Files: %61d\n\ 

+ Number of Structure Files: %6d\n\ 

\n\ 

= Total Number of Pseudo File Spaces: %61d\n\n\ 
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Each Pseudo File Space is %ldk.\n\n\ 

Avoid address ranges %1X-%1X in each block. \n" 

/* Define the format entire screen */ 

# define ENTIRE_INFO_MSG " \n\ 

Entire-Card Preformat installed. \n\n\ 

Number of Pseudo Files: %61d\n\ 

Number of Structure Files: %6d\n\n\ 

The Pseudo File is %ldk.\n\n\ 

Avoid address ranges %1X-%1X in each block. An" 

/* 

** Error Messages: 

*/ 

#def ine ERROR_MSG 
# define INVL_DRV_LET_MSG 
# define INVL_SELECT_MSG 
#define SPECIFY_MSG 
#def ine TOO_MANY__MSG 
letter .\n" 

#define USAGE_MSG "Correct usage example: C:>SBM E:\n" 


#endif 

/* End of File: SBM_MSG . H 

** COPYRIGHT (c) 1994 Intel Corporation, ALL RIGHTS RESERVED 

***************************************************************************** j 


" \nError" 

"The drive letter entered is invalid. \n" 

"Error, Invalid selection. \n" 

"Please specify one drive letter. \n" 

"Too many parameters, please specify only a drive\ 
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28F016XS 
16-MBIT (1 MBIT X 16, 2 MBIT X 8) 
SYNCHRONOUS FLASH MEMORY 


28F016XS Flash Memory 


Effective Zero Wait-State Performance ■ 

up to 33 Mhz 

— Synchronous Pipelined Reads u 

SmartVoltage Technology _ 

— User-Selectable 3.3V or 5V V cc 

— User-Selectable 5V or 12V V PP 

0.33 MB/sec Write Transfer Rate * 

Configurable x8 or x16 Operation u 

56-Lead TSOP Type I Package u 


Backwards-Compatible with 28F008SA 
Command-Set 

2 pA Typical Deep Power-Down 

1 mA Typical Active l C c Current in 
Static Mode 

16 Separately-Erasable/Lockable 
128-Kbyte Blocks 

1 Million Erase Cycles per Block 

State-of-the-Art 0.6 pm ETOX™ IV Flash 
Technology 


Intel’s 28F016XS 16-Mbit Flash memory is a revolutionary architecture which is the ideal choice for designing 
truly revolutionary high-performance products. Combining very high read performance with the intrinsic 
non-volatility of flash memory, the 28F016XS eliminates the traditional redundant memory paradigm of 
shadowing code from a slow nonvolatile storage source to a faster execution memory, such as DRAM, for 
improved system performance. The innovative capabilities of the 28F016XS enable the design of 
direct-execute code and mass storage data/file flash memory systems. 


The 28F016XS is the highest performance high density nonvolatile read/write flash memory solution available 
today. Its synchronous pipelined read interface, flexible V cc and V PP voltages, extended cycling, fast write 
and read performance, symmetrically blocked architecture, and selective block locking provide a highly 
flexible memory component suitable for resident flash component arrays on the system board or SIMMs. The 
synchronous pipelined interface and x8/x16 architecture of the 28F016XS allow easy interface with minimal 
glue logic to a wide range of processors/buses, providing effective zero wait-state read performance up to 
33 MHz. The 28F016XS’s dual read voltage allows the same component to operate at either 3.3V or 
5.0V V cc . Programming voltage at 5V V PP minimizes external circuitry in minimal-chip, space critical designs, 
while the 12V V PP option maximizes write/erase performance. Its high read performance combined with 
flexible block locking enable both storage and execution of operating systems/application software and fast 
access to large data tables. The 28F016XS is manufactured on Intel’s 0.6 pm ETOX™ IV process 
technology. 


Order Number 290532-002 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016XS Flash 
memory device includes this datasheet, a detailed 
user’s manual, a number of application notes and 
design tools, all of which are referenced at the end 
of this datasheet. 

The datasheet is intended to give an overview of 
the chip feature-set and of the operating AC/DC 
specifications. The 16-Mbit Flash Product Family 
User's Manual provides complete descriptions of 
the user modes, system interface examples and 
detailed descriptions of all principles of operation. It 
also contains the full list of software algorithm 
flowcharts, and a brief section on compatibility with 
the Intel 28F008SA. 

Significant 28F016XS feature revisions occurred 
between datasheet revisions 290532-001 and 
290532-002. These revisions center around 
removal of the following features: 

o All page buffer operations (read, write, 
programming, Upload Device Information) 

o Command queuing 

• Software Sleep and Abort 

® Erase all Unlocked Blocks and Two-Byte Write 

• RY/BY# reconfiguration as part of the Device 
Configuration command 

Intel recommends that all customers obtain the 
latest revisions of 28F016XD documentation. 


1.1 Product Overview 

The 28F016XS is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable nonvolatile random 
access memory organized as either 1 Mword x 16 
or 2 Mbyte x 8, subdivided into even and odd 
banks. Address A 1 makes the bank selection. The 
28F016XS includes sixteen 128-Kbyte (131,072 
byte) blocks or sixteen 64-Kword (65,536 word) 
blocks. Chip memory maps for x8 and x16 modes 
are shown in Figures 3 and 4. 

The implementation of a new architecture, with 
many enhanced features, will improve the device 
operating characteristics and result in greater 
product reliability and ease-of-use as compared to 
other flash memories. Significant features of the 
28F016XS as compared to previous asynchronous 
flash memories include: 


• Synchronous Pipelined Read Interface 

• Significantly Improved Read and Write 
Performance 

• SmartVoltage Technology 

— Selectable 3.3V or 5.0 V cc 
— Selectable 5.0V or 12.0 Vp P 

• Internal 3.3V/5.0V V cc Detection Circuitry 

• Block Write/Erase Protection 

The 28F016XS's synchronous pipelined interface 
dramatically raises read performance far beyond 
previously attainable levels. Addresses are 
synchronously latched and data read from a 
28F016XS bank every 30 ns (5V V C c, SFI 
Configuration = 2). This capability translates to 
0-wait-state reads at clock rates up to 33 MHz at 
5V Vcc, after an initial address pipeline fill delay 
and assuming even and odd banks within the flash 
memory are alternately accessed. Data is latched 
and driven valid 20 ns (t C HQv) after a rising CLK 
edge. The 28F016XS is capable of operating up to 
66 MHz (5V Vcc); its programmable SFI 
Configuration enables system design flexibility, 
optimizing the 28F016XS to a specific system clock 
frequency. See Section 4.9, SFI Configuration 
Table, for specific SFI Configurations for given 
operating frequencies. 

The SFI Configuration optimizes the 28F016XS for 
a wide range of system operating frequencies. The 
default SFI Configuration is 4, which allows system 
boot from the 28F016XS at any frequency up to 
66 MHz at 5V V cc . After initiating an access, data 
is latched and begins driving on the data outputs 
after a CLK count corresponding to the SFI 
Configuration has elapsed. The 28F016XS will hold 
data valid until CE X # or OE# is deactivated or a 
CLK count corresponding to the SFI Configuration 
for a subsequent access has elapsed. 

The CLK and ADV# inputs, new to the 28F016XS in 
comparison to previous flash memories, enable 
synchronous latching of input addresses for reads. 
The CLK input controls the device latencies, 
decrements the SFI Configuration counter and 
synchronizes data outputs. ADV# indicates the 
presence of a valid address on the 28F016XS 
address inputs. During read operations, addresses 
are latched and accesses are initiated on a rising 
CLK edge in conjunction with ADV# low. Both CLK 
and ADV# are ignored by the 28F016XS during 
command/data write sequences. 
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The 28F016XS incorporates SmartVoltage 
technology, providing v cc operation at both 3.3V 
and 5.0V and program and erase capability at 
V P p = 12.0V or 5.0V. Operating at V cc = 3.3V, the 
28F016XS consumes less than one half the power 
consumption at 5.0V V cc , while 5.0V V cc provides 
highest read performance capability. V PP operation 
at 5.0V eliminates the need for a separate 12.0V 
converter, while the V PP = 12.0V option maximizes 
write/erase performance. In addition to the flexible 
program and erase voltages, the dedicated V PP 
gives complete code protection with V PP < V PPLK . 

Internal 3.3V or 5.0V V cc detection automatically 
configures the device for optimized 3.3V or 5.0V 
read/write operation. Hence, the 28F016SA's 
3/5# pin is not required and is a no-connect (NC) on 
the 28F016XS, maintaining pin-out backwards- 
compatibility between components. 

A Command User Interface (CUI) serves as the 
system interface between the microprocessor or 
microcontroller and the internal memory operation. 

Internal Algorithm Automation allows byte/word 
writes and block erase operations to be executed 
using a Two-Write command sequence to the CUI 
in the same way as the 28F008SA 8-Mbit 
FlashFile™ memory. 

Software locking of memory blocks is an added 
feature of the 28F01 6XS as compared to the 
28F008SA. The 28F016XS provides selectable 
block locking to protect code or data such as direct- 
executable operating systems or application code. 
Each block has an associated nonvolatile lock-bit 
which determines the lock status of the block. In 
addition, the 28F016XS has a master Write Protect 
pin (WP#) which prevents any modifications to 
memory blocks whose lock-bits are set. 

Writing of memory data is performed in either byte 
or word increments, typically within 6 psec at 1 2.0 V 
V PP , which is a 33% improvement over the 
28F008SA. A block erase operation erases one of 
the 16 blocks in typically 1.2 sec, independent of 
the other blocks. 

Each block can be written and erased a minimum of 
100,000 cycles. Systems can achieve one million 
Block Erase Cycles by providing wear-leveling 
algorithms and graceful block retirement. These 
techniques have already been employed in many 
flash file systems and hard disk drive designs. 


All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later in this datasheet) and a 
RY/BY# output pin provide information on the 
progress of the requested operation. 

The following Status Registers are used to provide 
device and WSM operation information to the user: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory Status Register. The CSR, when used 
alone, provides a straightforward upgrade 
capability to the 28F016XS from a 28F008SA- 
based design. 

• A Global Status Register (GSR) which also 
informs the system of overall Write State 
Machine (WSM) status. 

• 16 Block Status Registers (BSRs) which 
provide block-specific status information such 
as the block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide 
and Word-Wide modes are shown in Figures 5 
and 6. 

The 28F01 6XS incorporates an open drain RY/BY# 
output pin. This feature allows the user to OR-tie 
many RY/BY# pins together in a multiple memory 
configuration such as a Resident Flash Array. 

The 28F016XS also incorporates a dual chip- 
enable function with two input pins, CE 0 # and CE^. 
These pins have exactly the same functionality as 
the regular chip-enable pin, CE#, on the 28F008SA. 
For minimum chip designs, CE^ may be tied to 
ground and system logic may use CE 0 # as the chip 
enable input. The 28F016XS uses the logical 
combination of these two signals to enable or 
disable the entire chip. Both CE 0 # and CE^ must 
be active low to enable the device. If either one 
becomes inactive, the chip will be disabled. This 
feature, along with the open drain RY/BY# pin, 
allows the system designer to reduce the number of 
control pins used in a large array of 16-Mbit 
devices. 
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Figure 1. 28F016XS Block Diagram 

Architectural Evolution Includes Synchronous Pipelined Read Interface, 
SmartVoltage Technology, and Extended Status Registers 
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The BYTE# pin allows either x8 or x16 read/writes 
to the 28F016XS. BYTE# at logic low selects 8-bit 
mode with address A 0 selecting between low byte 
and high byte. On the other hand, BYTE# at logic 
high enables 16-bit operation with address A-, 
becoming the lowest order address and address A 0 
is not used (don’t care). A device block diagram is 
shown in Figure 1 . 

The 28F016XS incorporates an Automatic Power 
Saving (APS) feature, which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). In APS 
mode, the typical l cc current is 1 mA at 5.0V (3 mA 
at 3.3V). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 2.0 pA, typically, and 
provides additional write protection by acting as a 
device reset pin during power transitions. A reset 
time of 300 ns (5V Vcc) is required from RP# 
switching high before latching an address into the 


28F016XS. In the Deep Power-Down state, the 
WSM is reset (any current operation will abort) and 
the CSR, GSR and BSR registers are cleared. 

A CMOS standby mode of operation is enabled 
when either CE 0 # or CE^ transitions high and RP# 
stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
l cc standby current of 70 pA at 5V V cc . 


The 28F016XS is available in a 56-Lead, 1.2mm 
thick, 14mm x 20mm TSOP Type I package. The 
package's form factor and pinout allow for very high 
board layout densities. 


2.0 DEVICE PINOUT 

The 28F016XS is pinout compatible with the 
28F016SA/SV 16-Mbit FlashFile memory 
components, providing a performance upgrade path 
to the 28F016XS. The 28F016XS 56-Lead TSOP 
pinout configuration is shown in Figure 2. 



Figure 2. 28F016XS 56-Lead TSOP Pinout Configuration Shows Compatibility with 
the 28F016SA/SV, Allowing for Easy Performance Upgrades from Existing 16-Mbit Designs 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

Ao 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when device is 
in x8 mode. This address is latched in x8 data writes and ignored in x16 mode 
(i.e., the A 0 input buffer is turned off when BYTE# is high). 

Ai 

INPUT 

BANK-SELECT ADDRESS: Selects an even or odd bank in a selected block. 
A 128-Kbyte block is subdivided into an even and odd bank. A^ = 0 selects the 
even bank and A-i = 1 selects the odd bank, in both byte-wide mode and word- 
wide mode device configurations. 

CO 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 128-Kbyte block. 
Address A-, and A 7-16 select 1 of 2048 rows, and A 2-6 select 16 of 512 
columns. These addresses are latched during both data reads and writes. 

A 17 -A 20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 16 Erase blocks. These 
addresses are latched during data writes, erase and lock-block operations. 

DQ 0 -DQ 7 

INPUT 

OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write cycles. 
Outputs array, identifier or status data in the appropriate read mode. Floated 
when the chip is de-selected or the outputs are disabled. 

DQa-DQis 

INPUT 

OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 data-write operations. Outputs 
array or identifier data in the appropriate read mode; not used for Status 
Register reads. Outputs floated when the chip is de-selected, the outputs are 
disabled (OE# = V !H ) or BYTE# is driven active. 

CE 0 #, CE-j# 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. With either CEo# or CEi# high, the device is 
de-selected and power consumption reduces to standby levels upon 
completion of any current data-write or erase operations. Both CEo# and CEi# 
must be low to select the device. 

All timing specifications are the same for both signals. Device Selection occurs 
with the latter falling edge of CEo# or CEi#. The first rising edge of CEo# or 
CEi# disables the device. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power-Down 
state. All circuits that consume static power, even those circuits enabled in 
standby mode, are turned off. When returning from Deep Power-Down, a 
recovery time of tpHCH is required to allow these circuits to power-up. 

When RP# goes low, the current WSM operation is terminated, and the device 
is reset. All Status Registers return to ready, clearing all status flags. Exit from 
Deep Power-Down places the device in read array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Drives device data through the output buffers when low. 
The outputs float to tri-state off when OE# is high. CEx# overrides OE#, and 
OE# overrides WE#. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Data Register and Address 
Latch. WE# is active low, and latches both address and data (command or 
array) on its rising edge. 


ADVANCE INFORMATION 


107 


































28F016XS Flash Memory 


iny 


2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

CLK 

INPUT 

CLOCK: Provides the fundamental timing and internal operating frequency. 
CLK latches input addresses in conjunction with ADV#, times out the desired 
output SFI Configuration as a function of the CLK period, and synchronizes 
device outputs. CLK can be slowed or stopped with no loss of data or 
synchronization. CLK is ignored during write operations. 

ADV# 

INPUT 

ADDRESS VALID: Indicates that a valid address is present on the address 
inputs. ADV# low at the rising edge of CLK latches the address on the address 
inputs into the flash memory and initiates a read access to the even or odd 
bank depending on the state of A-, . ADV# is ignored during write operations. 

RY/BY# 

OPEN 

DRAIN 

OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it indicates 
that the WSM is busy performing an operation. RY/BY# high indicates that the 
WSM is ready for new operations, Erase is Suspended, or the device is in deep 
power-down mode. This output is always active (i.e., not floated to tri-state off 
when OE# or CE 0 #, CE^ are high). 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile lock-bit 
for each block. When WP# is low, those locked blocks as reflected by the 
Block-Lock Status bits (BSR.6), are protected from inadvertent data writes or 
erases. When WP# is high, all blocks can be written or erased regardless of 
the state of the lock-bits. The WP# input buffer is disabled when RP# 
transitions low (deep power-down mode) . 

BYTE# 

INPUT 

BYTE ENABLE: BYTE# low places device in x8 mode. All data is then input or 
output on DQ 0 - 7 , and DQs-is float. Address Ao selects between the high and 
low byte. BYTE# high places the device in x16 mode, and turns off the Ao input 
buffer. Address Ai then becomes the lowest order address. 

Vp P 

SUPPLY 

WRITE/ERASE POWER SUPPLY (12.0V ± 0.6V, 5.0V ± 0.5V) : 

For erasing memory array blocks or writing words/bytes into the flash array. 
V pp = 5.0V ± 0.5V eliminates the need for a 12V converter, while the 12.0V ± 
0.6V option maximizes Write/Erase Performance. 

Successful completion of write and erase attempts is inhibited with V PP at or 
below 1 .5V. Write and Erase attempts with V PP between 1 .5V and 4.5V, 
between 5.5V and 1 1.4V, and above 12.6V produce spurious results and 
should not be attempted. 

o< 

o 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V): 

Internal detection configures the device for 3.3V or 5.0V operation. To switch 
3.3V to 5.0V (or vice versa), first ramp Vcc down to GND, and then power to 
the new Vcc voltage. Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 

NC 


NO CONNECT: 

Lead may be driven or left floating. 
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3.0 MEMORY MAPS 


x8 Mode 

128-Kbyte Block 15 
128-Kbyte Block 14 
128-Kbyte Block 13 
128-Kbyte Block 12 
128-Kbyte Block 11 
1 28-Kbyte Block 1 0 
128-Kbyte Block 9 
128-Kbyte Block 8 
128-Kbyte Block 7 
128-Kbyte Block 6 
128-Kbyte Block 5 
128-Kbyte Block 4 
128-Kbyte Block 3 
128-Kbyte Block 2 
128-Kbyte Block 1 
128-Kbyte Block 0 


Figure 3. 28F016XS Memory Map 
(Byte-Wide Mode) 



Figure 4. 28F016XS Memory Map 
(Word-Wide Mode) 
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3.1 Extended Status Register Memory Map 


x8 Mode 

A 20-0 

1FFFFFH 




RESERVED 



RESERVED 

1E0006H 

1E0005H 

1E0004H 

1E0003H 

1E0002H 

1E0001H 

1E0000H 


GSR 


RESERVED 


BSR15 


RESERVED 


RESERVED 

■ 

■ 


■ 

01FFFFH 




RESERVED 

000006H 

000005H 

000004H 

000003H 

000002H 

000001 H 
000000H 

0532_05 


RESERVED 


GSR 


RESERVED 


BSR 0 


RESERVED 


RESERVED 



x16 Mode 

A 20-1 

FFFFFH 




RESERVED 

F0003H 


RESERVED 


GSR 

' 

F0002H 


RESERVED 


BSR 15 

F0001H 


RESERVED 


RESERVED 

F0000H 

■ 

■ 


■ 

0FFFFH 




RESERVED 

00003H 




RESERVED 



GSR 

00002H 




RESERVED 



BSR 0 

00001 H 


RESERVED 


RESERVED 

00000H 

0532_06 



Figure 5. Extended Status Register Memory Figure 6. Extended Status Register Memory 

Map (Byte-Wide Mode) Map (Word-Wide Mode) 


ADVANCE INFORMATION 







28F016XS Flash Memory 


intgl 

4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations for Word-Wide Mode (BYTE# - Vih) 


Mode 

Notes 

RP# 

O 

m 

o 

% 

OE# 

WE# 

ADV# 

CLK 

mm 

DQo-15 

RY/BY# 

Latch Read 
Address 

1,9,10 

V,H 

V,L 

X 

V,H 

V|L 

T 

X 

X 

X 

Inhibit 
Latching 
Read Address 

1,9 

V,H 

V IU 

X 

V,H 

V,h 

t 

X 

X 

X 

Read 

1,2, 7, 9 

V| H 

V,L 

V,L 

V IH 

X 

T 

X 

d out 

X 

Output 

Disable 

1,6, 7, 9 

V|H 

VlL 

V|H 

V,H 

X 

X 

X 

High Z 

X 

Standby 

1,6, 7, 9 

V|H 

V IL 

X 

X 

X 

X 

X 

High Z 

X 

Deep 

Power-Down 

1,3 

V|L 

X 

X 

X 

X 

X 

X 

High Z 

V OH 

Manufacturer 

ID 

1,4,9 

V| H 

VlL 

V,L 

V,H 

X 

T 

V,L 

0089H 

< 

0 

1 

Device ID 

1,4, 8, 9 

V|H 

V,L 

V,L 

V,H 


T 

V,H 

66A8H 

I 

o 

> 

Write 

1 ,5,6,9 

V,H 

V,L 

V,H 

V, L 


X 



X 


NOTES: 


1 . X can be Vih or Vil for address or control pins except for RY/BY#, which is either Vol or Voh, or High Z or Dout for data 
pins depending on whether or not OE# is active. 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended, or the device is in deep power-down mode, 
RY/BY# will be at Voh if it is tied to Vcc through a resistor. RY/BY# at Voh is independent of OE# while a WSM operation 
is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. Ao and Ai at Vil provide device manufacturer codes in x8 and x16 modes respectively. Ao and At at Vih provide device ID 
codes in x8 and xl 6 modes respectively. All other addresses are set to zero. . , 

5. Commands for erase, data write, or lock-block operations can only be completed successfully when Vpp = Vpphi or 
Vpp = VppH2- 

6. While the WSM is running, RY/BY# stays at Vol until all operations are complete. RY/BY# goes to Voh when the WSM is 
not busy or in erase suspend mode. 

7. RY/BY# may be at Vol while the WSM is busy performing various operations (for example, a Status Register read during a 
write operation). 

8. The 28F016XS shares an identical device identifier with the 28F016XD. 

9. CEo-i# at V IL is defined as both CEo# and CE^ low, and CEo-i# at Vih is defined as either CEo# or CEi# high. 

10. Addresses are latched on the rising edge of CLK in conjunction with ADV# low. Address Ai = 0 selects the even bank and 
Ai = 1 selects the odd bank, in both byte-wide mode and word-wide mode device configurations. 
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4.2 Bus Operations for Byte-Wide Mode (BYTE# = Vil) 


Mode 

Notes 

RP# 

CEg_i# 

OE# 

WE# 

ADV# 

CLK 

El 

DQo_7 

RY/BY# 

Latch Read 
Address 

1.9,10 

V,H 

v, L 

X 

V|H 

VlL 

t 

X 

X 

X 

Inhibit 
Latching 
Read Address 

1,9 

V,H 

V IL 

X 

V,H 

Vih 

t 

X 

X 

X 

Read 

1,2,7, 9 

V,H 

V,L 

V,L 

V,H 

X 

t 

X 

d out 

X 

Output 

Disable 

1,6, 7, 9 

V,H 

V, L 

Yih 

V IH 

X 

X 

X 

High Z 

H 

Standby 

1,6,7, 9 

V|H 

V IH 

X 

X 

X 

X 

X 

High Z 

X 

Deep 

Power-Down 

1,3 

V,L 

X 

X 

X 

X 

X 

X 

High Z 

Voh 

Manufacturer 

ID 

1,4,9 

V IH 

VlL 

VlL 

V|H 

X 

T 

VlL 

89H 

I 

o 

> 

Device ID 

1,4, 8, 9 

V,H 

V|L 

V,L 

V|H 

X 

T 

Vih 

A8H 

I 

o 

> 

Write 

1 ,5,6,9 

V,H 

V,L 

V,H 

v IL 

X 

X 

X 

d in 

X 


NOTES: 

1 . X can be Vih or Vil for address or control pins except for RY/BY#, which is either Vol or Voh, or High Z or Dout for data 
pins depending on whether or not OE# is active. 


2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended, or the device is in deep power-down mode, 
RY/BY# will be at Voh if it is tied to Vcc through a resistor. RY/BY# at Voh is independent of OE# while a WSM operation 
is in progress. 

3. RP# at GND ± 0.2V ensures the lowest deep power-down current. 

4. Ao and Ai at Vil provide device manufacturer codes in x8 and x16 modes respectively. Ao and Ai at Vih provide device ID 
codes in x8 and x16 modes respectively. All other addresses are set to zero. 

5. Commands for erase, data write, or lock-block operations can only be completed successfully when Vpp = Vpphi or 
Vpp = VppH2- 

6. While the WSM is running, RY/BY# stays at Vol until all operations are complete. RY/BY# goes to Voh when the WSM is 
not busy or in erase suspend mode. 

7. RY/BY# may be at Vol while the WSM is busy performing various operations (for example, a Status Register read during a 
write operation). 

8. The 28F016XS shares an identical device identifier with the 28F016XD. 

9. CEo_i# at Vil is defined as both CE 0 # and CEi# low, and CEo_i# at Vih is defined as either CE 0 # or CEi# high. 

10. Addresses are latched on the rising edge of CLK in conjunction with ADV# low. Address Ai = 0 selects the even bank and 
Ai = 1 selects the odd bank, in both byte-wide mode and word-wide mode device configurations. 
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4.3 28F008SA — Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data'* 1 

Oper 

Addr 

Data (4) 

Read Array 


Write 

X 

xxFFH 

Read 

AA 

AD 

Intelligent Identifier 

1 

Write 

X 

xx90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 

Write 

X 

xx70H 

Read 

X 

CSRD 

Clear Status Register 

3 

Write 

X 

xx50H 




Word/Byte Write 


Write 

X 

xx40H 

Write 

WA 

WD 

Alternate Word/Byte Write 


Write 

X 

xxlOH 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

xx20H 

Write 

BA 

xxDOH 

Erase Suspend/Resume 


Write 

X 

xxBOH 

Write 

X 

xxDOH 


ADDRESS 

AA = Array Address 

BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 


NOTES: 

1 . Following the Intelligent Identifier command, two read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters data write, erase, or suspend operations. 

3. Clears CSR.3, CSR.4 and CSR. 5. Also clears GSR.5 and all BSR.5, BSR.4 and BSR.2 bits. See Status Register 
definitions. 

4. The upper byte of the data bus (Ds-is) during command writes is a “Don’t Care” in x16 operation of the device. 
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4.4 28F016XS — Enhanced Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data 1 * 1 

Oper 

Addr 

Data (4) 

Read Extended Status Register 

1 

Write 

H 

xx71H 

Read 

RA 

GSRD 

BSRD 

Lock Block/Confirm 


Write 

X 

xx77H 

Write 

BA 

xxDOH 

Upload Status Bits/Confirm 

2 

Write 

X 

xx97H 

Write 

X 

xxDOH 

Device Configuration 

3 

Write 

X 

xx96H 

Write 

X 

DCCD 


ADDRESS DATA 

BA = Block Address AD = Array Data DCCD = Device Configuration Code Data 

RA = Extended Register Address BSRD = BSR Data 

WA = Write Address GSRD = GSR Data 

X = Don’t Care 

NOTES: 

1 . RA can be the GSR address or any BSR address. See Figures 4 and 5 for Extended Status Register memory maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 

actual lock-bit status. 

3. This command sets the SFI Configuration allowing the device to be optimized for the specific sytem operating frequency. 

4. The upper byte of the Data bus (Ds-is) during command writes is a “Don’t Care” in x16 operation of the device. 
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4.5 Compatible Status Register 



6 5 4 3 2 1 0 



NOTES: 

CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Erase, 
Erase Suspend, or Data Write) before the 
appropriate Status bit (ESS, ES or DWS) is 
checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 
0 = Erase In Progress/Completed 


CSR.5 = ERASE STATUS 

1 = Error In Block Erasure 
0 = Successful Block Erase 

If DWS and ES are set to “1” during an erase 
attempt, an improper command sequence was 
entered. Clear the CSR and attempt the 
operation again. 

CSR.4 = DATA-WRITE STATUS 
1 = Error in Data Write 
0 = Data Write Successful 


CSR.3 = V PP STATUS 

1 = V PP Error Detect, Operation Abort 
0 = V PP OK 

The VPPS bit, unlike an A/D converter, does not 
provide continuous indication of V PP level. The 
WSM interrogates V PP ’s level only after the Data 
Write or Erase command sequences have been 
entered, and informs the system if V PP has not 
been switched on. VPPS is not guaranteed to 
report accurate feedback between V PPLK (max) 
and V PPH1 (min), between V PPH1 (max) and 
VpPH2( m ' n )> anc * a bove V PPH2 (max). 

CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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4.6 Global Status Register 


WSMS 

OSS 

DOS 

R 

R 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 



NOTES: 

GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Block 
Lock, Suspend, Upload Status Bits, Erase or 
Data Write) before the appropriate Status bit 
(OSS or DOS) is checked for success. 

GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


GSR.4-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the GSR. 
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4.7 Block Status Register 

ii | iEi bos | r | r | vpps | vppl | r 

6 5 4 3 2 1 0 

NOTES: 

BSR.7 = BLOCK STATUS RY/BY# output or BS bit must be checked to 

1 = Ready determine completion of an operation (Block 

0 = Busy Lock, Suspend, Erase or Data Write) before the 

appropriate Status bits (BOS, BLS) is checked 
for success. 

BSR.6 = BLOCK LOCK STATUS 

1 = Block Unlocked for Write/Erase 

0 = Block Locked for Write/Erase 

BSR.5 = BLOCK OPERATION STATUS 

1 = Operation Unsuccessful 

0 = Operation Successful or 
Currently Running 

BSR.2 = V PP STATUS 

1 = V PP Error Detect, Operation Abort 

0 = V PP OK 

BSR.1 = V PP LEVEL BSR.1 is not guaranteed to report accurate 

1 = V PP Detected at 5.0V ± 10% feedback between the V PPH1 and V PPH2 voltage 

0 = V PP Detected at 1 2.0V ± 5% ranges. Writes and erases with V PP between 

VppLK(max) and V PPH1 (min), between 
Vpp H1 (max) and Vpp H2 (min), and above 
VppH 2 ( max ) produce spurious results and should 
not be attempted. 

BSR.4,3,0 = RESERVED FOR FUTURE ENHANCEMENTS 
These bits are reserved for future use; mask them out when polling the BSRs. 
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4.8 Device Configuration Code 


R 

R 

SFI2 

SFI1 

SFI0 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 


DCC.5-DCC.3 = SFI CONFIGURATION 
(SFI2-SFI0) 

001 = SFI Configuration 1 

010 = SFI Configuration 2 

01 1 = SFI Configuration 3 
1 00 = SFI Configuration 4 

(Default) 

DCC.7-6,2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when reading the Device Configuration Code. 
Set these bits to “0” when writing the desired SFI Configuration to the device. 


NOTES: 

Default SFI Configuration on power-up or return 
from deep power-down mode is 4, allowing 
system boot from the 28F01 6XS at any 
frequency up to the device's maximum 
frequency. Undocumented combinations of 
SFI2-SFI0 are reserved by Intel Corporation for 
future implementations and should not be used. 


4.9 SFI Configuration Table 


SFI 

Configuration 

Notes 

28F016XS-15 
Frequency (MHz) 

28F016XS-20 
Frequency (MHz) 

28F01 6XS-25 
Frequency (MHz) 

4 

1 

66 (and below) 

50 (and below) 

40 (and below) 

3 


50 (and below) 

37.5 (and below) 

30 (and below) 

2 


33 (and below) 

25 (and below) 

20 (and below) 

1 


16.7 (and below) 

12.5 (and below) 

1 0 (and below) 


NOTE: 


1. Default SFI Configuration after power-up or return from deep power-down mode via RP# low. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to +80°C 

Storage Temperature -65°C to +125°C 


NOTICE: This datasheet contains information on 
products in the sampling and initial production 
phases of development. The specifications are 
subject to change without notice. Verify with your 
local Intel Sales office that you have the latest 
datasheet before finalizing a design. 

* WARNING : Stressing the device beyond the 
“ Absolute Maximum Ratings” may cause 
permanent damage. These are stress ratings 
only. Operation beyond the “Operating 
Conditions ” is not recommended and extended 
exposure beyond the "Operating Conditions" may 
affect device reliability. 


V cc = ± Systems 


Symbol 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

D 

Ambient Temperature 

V cc 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


Vpp 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CCl V PP ) with 
Respect to GND 

2,5 

-0.5 

v cc 
+ 0.5 

V 


1 

Current into any Non-Supply Pin 

5 


±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



V cc = 5.0V ± 0.5V Systems 



Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

□ 

Ambient Temperature 

o< 

o 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


CL 

CL 

> 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CCl V PP ) with 
Respect to GND 

2,5 

-2.0 

7.0 

V 


1 

Current into any Non-Supply Pin 

5 


±30 

mA 


•out 

Output Short Circuit Current 

■■ 


100 

mA 



NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods <20 
ns. Maximum DC voltage on input/output pins is V cc +0.5V which may overshoot to V cc +2.0V for periods <20 ns. 

3. Maximum DC voltage on V pp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. This specification also applies to pins marked “NC.” 
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5.2 Capacitance 

For a 3.3V ± 0.3V System: 



Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 


Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 



Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 


C LOAD 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1 

■ 

50 

PF 

For the 28F016XS-20 
and 28F016XS-25 


For 5.0V ± 0.5V System: 


Symbol 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C IN 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 


C OUT 

Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 

Ta= 25°C, f = 1 .0 MHz 

C|_OAD 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1 

■ 

100 

PF 

For the 28F016XS-20 

■ 

30 

PF 

For the 28F016XS-15 


NOTE: 

1. Sampled, not 100% tested. Guaranteed by design. 

2. To obtain iBIS models for the 28F016XS, please contact your local Intel/Distribution Sales Office. 
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5.3 Transient Input/Output Reference Waveforms 



Figure 7. Transient Input/Output Reference Waveform (V cc = 5.0V ± 0.5V) 
for Standard Testing Configuration^) 



Figure 8. Transient Input/Output Reference Waveform (V cc = 3.3V ± 0.3V) 
High Speed Reference Waveform( 2 ) (V cc = 5.0V ± 0.5V) 


NOTES: 

1. Testing characteristics for 28F016XS-20 at 5V V cc . 

2. Testing characteristics for 28F016XS-15 at 5V V cc and 28F016XS-20/28F016XS-25 at 3.3V V cc . 
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5.4 DC Characteristics 

V cc = 3.3V ± 0.3V, T a - 0°G to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

m 

Input Load Current 

1 

■ 

■ 

±1 

pA 

Vcc = ^cc Max, 
V IN = V cc or GND 

m 

Output Leakage 
Current 

1 

■ 

■ 

±10 

PA 

Vcc = Vcc Max, 
Vout = V C c or GND 

•ccs 

V cc Standby 
Current 

1,5 

1 

70 

130 

ma 

V C c = V cc Max, 

CE 0 #, CEt#, RP# = V cc ± 
0.2V 

BYTE#, WP# = V cc ± 0.2V 
or GND ± 0.2V 

■ 

1 

■ 

mA 

Vcc = Vcc Max, 

CE 0 #, CE-j#, RP# = V,h 
BYTE#, WP# = V| H orV| L 

■ 

V cc Deep 

Power-Down 

Current 

1 

■ 

2 

5 

pA 

RP# = GND ± 0.2V 
BYTE# = V cc ± 0.2V or 
GND ± 0.2V 

•CCR 1 

V C c Word/Byte 
Read Current 

1,4,5 


65 

85 

mA 

Vcc = Vcc Max 

CMOS: CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V or 
V CC ± 0.2V 

Inputs = GND ± 0.2V or V C c 
± 0.2V 

4- Location Access 

Sequence: 3-1 -1-1 
(clocks) 

f = 25 MHz, Iqut = 0 mA 

•CCR 2 

Vcc Word/Byte 
Read Current 

1,4, 

5,6 

1 

60 

75 

mA 

Vcc = Vcc Max 

CMOS: CE 0 #, CEi# = GND 
± 0.2V 

BYTE# = GND ± 0.2V or 
V cc ± 0.2V 

Inputs = GND ± 0.2V or V cc 
± 0.2V 

4-Location Access 

Sequence: 3-1 -1-1 
(clocks) 

f = 16 MHz, Iqut = 0 mA 
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5.4 DC Characteristics (Continued) 
V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

!ccw 

V cc Write Current 

1,6 

Hi 

8 

12 

mA 

Word/Byte Write in Progress 
V PP = 12.0V ± 5% 

■ 

8 

17 

m.A 

Word/Byte Write in Progress 
V PP = 5.0V ± 10% 

■cCE 

V cc Block Erase 
Current 

1,6 

■ 

6 

12 

mA 

Block Erase in Progress 
V PP = 12.0V ± 5% 

■ 

9 

17 

mA 

Block Erase in Progress 
V PP = 5.0V ± 10% 

^CCES 

V cc Erase 
Suspend Current 

1,2 

■ 

3 

6 

mA 

CE 0 #, CE 1 # = V,h 
Block Erase Suspended 

*PPS 

•PPR 

V PP Standby/Read 
Current 

1 


±1 

±10 

pA 

O 

o 

> 

VI 

CL 

CL 

> 


30 

200 

mA 

Vpp > v cc 

•PPD 

V PP Deep Power- 
Down Current 

1 


0.2 

5 

M A 

RP# = GND ± 0.2V 

IppW 

V PP Write Current 

1,6 


10 

15 

mA 

Vpp = 12.0V ±5% 
Word/Byte Write in Progress 


15 

25 

mA 

Vpp = 5.0V ± 10% 
Word/Byte Write in Progress 

•pPE 

V PP Erase Current 

1,6 


■ 

10 

mA 

Vpp = 12.0V ±5% 

Block Erase in Progress 


14 

20 

mA 

Vpp = 5.0V ± 10% 

Block Erase in Progress 

*PPES 

Vp P Erase 
Suspend Current 

1 


30 

50 

MA 

Vpp = V PPH1 or V P pH 2 , Block 
Erase Suspended 

V|L 

Input Low Voltage 

6 

-0.3 


0.8 

V 


V|H 

Input High Voltage 

6 

2.0 

■ 

o CO 
>°? 

V 


_J 

O 

> 

Output Low 
Voltage 

6 

■ 

■ 

0.4 

V 


X 

o 

> 

Output High 
Voltage 

6 

2.4 

1 

1 

V 

V 

Iqj_i = —2.0 mA 
^cc = Vcc Min 

CM 

X 

o 

> 

O CM 
>°<? 

o o 

0 o 

1 > 
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5.4 DC Characteristics (Continued) 
V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 



Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

VpPLK 

Vpp Erase/Write 
Lock Voltage 

3,6 

0.0 

■ 

1.5 

V 


V PPH1 

Vpp during 

Write/Erase 

Operations 

3 

■ 

5.0 

5.5 

V 



Vpp during 

Write/Erase 

Operations 

3 

11.4 

12.0 

12.6 

V 


V LKO 

V cc Erase/Write 
Lock Voltage 


2.0 

■ 

■ 

V 



NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at V cc = 3.3V, V pp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds). 

2. I CCES is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum of 
•cces anc * Iccr- 

3. Block erases, word/byte writes and lock block operations are inhibited when V PP < V PPLK and not guaranteed in the ranges 
between V PPLK (max) and V PPH1 (min), between V PPH1 (max) and V PPH2 (min) and above V PPH2 (max). 

4. Automatic Power Savings (APS) reduces l CCR to 3 mA typical in static operation. 

5. CMOS Inputs are either V cc ± 0.2V or GND ± 0.2V. TTL Inputs are either V )L or V, H . 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.5 DC Characteristics 

V rr = 5.0V ± 0.5V, T a = 0°C to +70°C 


Symbol 



Parameter 


Input Load Current 


Output Leakage 
Current 


Vcc Standby 
Current 


Min Typ Max Units 




Vcc Deep Power- 
Down Current 


V cc Read Current 



V cc Read Current 1 ,4, 
5,6 



Test Conditions 


V cc = V cc Max 
V, N = V cc or GND 


V C c = Vqc Max 
V 0 ut = V cc or GND 


Vcc = Vcc Max 
CE 0 #, CE^, RP# = V cc ± 
0.2V 

BYTE#, WP# = V cc ± 0.2V 
or GND ± 0.2V 


Vcc = Vcc Max 
CE 0 #, CE^, RP# = V| H 
BYTE#, WP# = V, H or V, L 


RP# = GND ± 0.2V 
BYTE# = V cc ± 0.2V or 
GND ± 0.2V 


Vcc = Vcc Max, 

CMOS: CE 0 #,CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2V 
or V cc ± 0.2V 
Inputs = GND ± 0.2V or 
V cc ± 0.2V 
4- Location Access 

Sequence: 3-1 -1-1 


Vcc = Vcc Max, 

CMOS: CE 0 #, CE 1 # = GND 
± 0.2V 

BYTE# = GND ± 0.2 V 
or Vcc 0.2V 
Inputs = GND ± 0.2V or 
V cc ± 0.2V 
4-Location Access 

Sequence: 3-1 -1-1 


f = 20 MHz. 
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5.5 DC Characteristics (Continued) 

V cc = 5.0V ± 0.5V, T a = 0°C to +70°C 
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5.5 DC Characteristics (Continued) 
V cc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

V PPLK 

Vpp Write/Erase 
Lock Voltage 

3,6 

0.0 

■ 

1.5 

V 


V PPH1 

Vpp during 

Write/Erase 

Operations 


■ 

5.0 

5.5 

V 


VppH2 

Vpp during 

Write/Erase 

Operations 


11.4 

12.0 

12.6 

V 


V L ko 

V cc Write/Erase 
Lock Voltage 


2.0 

■ 

■ 

V 



NOTES: 


1 . All currents are in RMS unless otherwise noted. Typical values at V cc = 5.0V, V pp = 1 2.0 V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds) and are specified for a CMOS rise/fall time (10% to 90%) of 
<5 ns and a TTL rise/fall time of <10 ns. 

2. I CCES is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum of 
•cces ancl •ccr. 

3. Block erases, word/byte writes and lock block operations are inhibited when V PP £ V PPLK and not guaranteed in the ranges 
between V PPLK (max) and V PPH1 (min), between V PPH1 (max) and V PPH2 (min) and above V PPH2 (max). 

4. Automatic Power Saving (APS) reduces l CCR to 1 mA typical in static operation. 

5. CMOS Inputs are either V cc ± 0.2V or GND ± 0.2V. TTL Inputs are either V, L or V, H . 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.6 Timing Nomenclature 

All 3.3V system timings are measured from where signals cross 1 .5V. 

For 5.0V systems, use the standard JEDEC cross point definitions (standard testing) or from where signals 
cross 1 .5V (high speed testing). 

Each timing parameter consists of 5 characters. Some common examples are defined below: 


t E LCH time(t) from CE# (E) going low (L) to CLK (C) going high (H) 
t AV CH time(t) from address (A) valid (V) to CLK (C) going high (H) 

t W HDx time(t) from WE# (W) going high (H) to when the data (D) can become undefined (X) 



Pin Characters 


Pin States 

A 

Address Inputs 

H 

High 

C 

CLK (Clock) 

L 

Low 

D 

Data Inputs 

V 

Valid 

Q 

Data Outputs 

X 

Driven, but Not Necessarily Valid 

E 

CE# (Chip Enable) 

z 

High Impedance 

F 

BYTE# (Byte Enable) 

L 

Latched 

G 

OE# (Output Enable) 



W 

WE# (Write Enable) 



P 

RP# (Deep Power-Down Pin) 



R 

RY/BY# (Ready Busy) 



V 

ADV# (Address Valid) 



5V 

V cc at 4.5V Minimum 



3V 

V cc at 3.0V Minimum 
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5.7 AC Characteristics — Read Only OperationsO) 

V cr = 3.3V ± 0.3V, T a = 0°C to +70°C 


Versions* 3 ) 


Symbol 

Parameter 

fcLK 

CLK Frequency 

tcLK 

CLK Period 

^CH 

CLK High Time 

*01. 

CLK Low Time 

tcLCH 

CLK Rise Time 

^CHCL 

CLK Fall Time 

^ELCH 

CE X # Setup to CLK 

Wlch 

ADV# Setup to CLK 

UvCH 

Address Valid to CLK 

tcHAX 

Address Hold from CLK 

tcHVH 

ADV# Hold from CLK 

^GLCH 

OE# Setup to CLK 

tcHQV 

CLK to Data Delay 

tpHCH 

RP# High to CLK 

*CHQX 

Output Hold from CLK 

^ELQX 

CE X # to Output Low Z 

^EHQZ 

CE X # High to Output High Z 

^GLQX 

OE# to Output Low Z 

^GHQZ 

OE# High to Output High Z 

t()H 

Output Hold from CE X # or OE# 
Change, Whichever Occurs First 


28F016XS-20 
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5.7 AC Characteristics — Read Only Operations^) (Continued) 

V cc = 5.0V ± 0.5V, T a = 0°C to +70°C ■ 


Versions^) 

28F016XS-15< 4 > 

28F016XS-20( 5 ) 

Units 

Symbol 

Parameter 

Notes 

Min 

Max 

Min 

Max 

f CLK 

CLK Frequency 

7 


66 


50 

MHz 

tcLK 

CLK Period 


15 


20 


ns 

*CH 

CLK High Time 


3.5 


6 


ns 

*01. 

CLK Low Time 


3.5 


6 


ns 

tcLCH 

CLK Rise Time 



4 


4 

ns 

tcHCL 

CLK Fall Time 



4 


4 

ns 

tELCH 

CE X # Setup to CLK 

6 

25 


30 


ns 

Vlch 

ADV# Setup to CLK 


15 


20 


ns 

WCH 

Address Valid to CLK 


15 


20 


ns 

*CHAX 

Address Hold from CLK 


0 


0 


ns 

tcHVH 

ADV# Hold from CLK 


0 


0 


ns 

^GLCH 

OE# Setup to CLK 


15 


20 


ns 

*CHQV 

CLK to Data Delay 



20 


30 

ns 

tpHCH 

RP# High to CLK 


300 


300 


ns 

tcHQX 

Output Hold from CLK 

2 

5 


5 


n s 

tELQX 

CE X # to Output Low Z 

2,6 

0 


0 


ns 

^EHQZ 

CE X # High to Output High Z 

2,6 


30 


30 

ns 

^GLQX 

OE# to Output Low Z 

2 

0 


0 


ns 

^GHQZ 

OE# High to Output High Z 

2 


30 


30 

ns 

^OH 

Output Hold from CE X # or OE# 
Change, Whichever Occurs First 

6 

0 


0 


ns 


NOTES: 

1 . See AC Input/Output Reference Waveforms for timing measurements. 

2. Sampled, not 100% tested. Guaranteed by design. 

3. Device speeds are defined as: 

1 5 ns at V cc = 5.0V equivalent to 20 ns at V cc = 3.3V 
20 ns at V cc = 5.0V equivalent to 25 ns at V cc = 3.3V 

4. See the high speed AC Input/Output Reference Waveforms. 

5. See the standard AC Input/Output Reference Waveforms. 

6. CE X # is defined as the latter of CE 0 # or CE^ going low, or the first of CE 0 # or CE^ going high. 

7. Page buffer reads are valid at any frequency up to the corresponding SFI Configuration setting of 2. Page buffer reads 
above this frequency may produce invalid results and should not be attempted. See Section 4.9 for SFI Configuration 
frequency settings. 


130 


ADVANCE INFORMATION 





















































































































28F016XS Flash Memory 



Figure 10. Read Timing Waveform^) 

(SFI Configuration = 1, Alternate-Bank Accesses) 
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Figure 1 1 . Read Timing Waveform* 1 ) 

(SFI Configuration = 2 , Alternate-Bank Accesses) 
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Figure 12. Read Timing Waveform^ 1 ) 

(SFI Configuration = 3, Alternate-Bank Accesses) 
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Figure 13. Read Timing Waveform^ 1 ) 

(SF1 Configuration = 4, Alternating Bank Accesses) 
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5.8 AC Characteristics for WE# — Controlled Write Operations^) 

V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Versions 


28F016XS-20 


28F01 6XS-25 


Symbol 

Parameter 

Wav 

Write Cycle Time 

tvPWH 1 > 2 

Vp P Setup to WE# Going 
High 

tpHEL 

RP# Setup to CE X # Going 
Low 

*ELWL 

CE X # Setup to WE# Going 
Low 

WwH 

Address Setup to WE# 
Going High 

*DVWH 

Data Setup to WE# Going 
High 

twLWH 

WE# Pulse Width 

*WHDX 

Data Hold from WE# High 

twHAX 

Address Hold from WE# 
High 

WEH 

CE X # hold from WE# High 

WWL 

WE# Pulse Width High 

^GHWL 

Read Recovery before 
Write 

WRL 

WE# High to RY/BY# 
Going Low 

*RHPL 

RP# Hold from Valid 
Status Register (CSR, 
GSR, BSR) data and 
RY/BY# High 

Vhwl 

RP# High Recovery to 
WE# Going Low 

WCH 

Write Recovery before 
Read 

tQVVL 1 » 2 

V PP Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

twHQV 1 

Duration of Word/Byte 
Write Operation 

twHQV 2 

Duration of Block Erase 
Operation 


Min Typ Max Min Typ Max 
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5.8 AC Characteristics for WE#— Controlled Write Operations! 1 ) (Continued) 

V cc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Versions 


28F016XS-15 


28F01 6XS-20 


Symbol 

Parameter 

Wav 

Write Cycle Time 

tvpWH 1 > 2 

V PP Setup to WE# Going 
High 

*phel 

RP# Setup to CE X # Going 
Low 

^ELWL 

CE X # Setup to WE# Going 
Low 

WWH 

Address Setup to WE# 
Going High 

*DVWH 

Data Setup to WE# Going 
High 

fyvLWH 

WE# Pulse Width 

fyvHDX 

Data Hold from WE# High 

*WHAX 

Address Hold from WE# 
High 

twHEH 

CE X # hold from WE# High 

*WHWL 

WE# Pulse Width High 

^GHWL 

Read Recovery before 
Write 

WlRL 

WE# High to RY/BY# 
Going Low 

^RHPL 

RP# Hold from Valid 
Status Register (CSR, 
GSR, BSR) data and 
RY/BY# High 

tpHWL 

RP# High Recovery to 
WE# Going Low 

WCH 

Write Recovery before 
Read 

tQWL 1 > 2 

V PP Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

WlQV 1 

Duration of Word/Byte 
Write Operation 

WQV 2 

Duration of Block Erase 
Operation 


Notes Min Typ Max Min Typ Max Unit 




0.6 1.2 20 0.6 1.2 20 sec 
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NOTES: 

1 . Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. Guaranteed by design. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/byte write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all command write operations. 

7. CE X # is defined as the latter of CE 0 # or CE.,# going low, or the first of CE 0 # or CE^ going high. 

8. The TBD information will be available in a technical paper. Please contact Intel’s Application Hotline or your local sales 
office for more information. 
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NOTES: 

1 . This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during data write/erase operations. 

4. CE X # is defined as the latter of CE 0 # or CE^ going low or the first of CE 0 # or CE^ going high. 

5. RP# low transition is only to show t RHPL ; not valid for above Read and Write cycles. 

6. Data Write/Erase cycles are asynchronous; CLK and ADV# are ignored. 

7. V pp voltage during data write/erase operations valid at both 12.0V and 5.0V. 

8. Vpp voltage equal to or below V PPLK provides complete flash memory array protection. 


Figure 14. AC Waveforms for WE#— Command Write Operations, 

Illustrating a Two Command Write Sequence Followed by an Extended Status Register Read 
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5.9 AC Characteristics for CEx#— Controlled Write Operations^ 1 ) 


V nr . = 3.3V ± 0.3V, T A = 0°C to +70°C 


Symbol 


Versions 


Parameter 


Write Cycle Time 


tvpEH^ >2 Vpp Setup to CE X # Going 
High 


RP# Setup to WE# Going 
Low 


WE# Setup to CE X # Going 
Low 


Address Setup to CE X # 
Going High 


Data Setup to CE X # Going 
High 


CE X # Pulse Width 


Data Hold from CE X # High 


Address Hold from CE X # 
High 


WE hold from CE X # High 


CE X # Pulse Width High 


Read Recovery before 
Write 


CE X # High to RY/BY# 
Going Low 


RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 


RP# High Recovery to 
CE X # Going Low 


Write Recovery before 
Read 


t QVVL 1 .2 v pp Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 


Duration of Word/Byte 
Write Operation 


Duration of Block Erase 
Operation 



28F01 6XS-20 


28F016XS-25 


Min Typ Max Min Typ Max 
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5.9 AC Characteristics for CEx#— Controlled Write OperationsC 1 ) (Continued) 

V cc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Versions 


28F01 6XS-1 5 


28F016XS-20 


Symbol 

Parameter 

Wav 

Write Cycle Time 

tvpEH 1 » 2 

V PP Setup to CE X # Going 
High 

*phwl 

RP# Setup to WE# Going 
Low 

Wel 

WE# Setup to CE X # Going 
Low 

Weh 

Address Setup to CE X # 
Going High 

Weh 

Data Setup to CE X # Going 
High 

WeH 

CE X # Pulse Width 

^EHDX 

Data Hold from CE X # High 

^EHAX 

Address Hold from CE X # 
High 

WlWH 

WE hold from CE X # High 

^EHEL 

CE X # Pulse Width High 

^GHEL 

Read Recovery before 
Write 

^EHRL 

CE X # High to RY/BY# 
Going Low 

^RHPL 

RP# Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

*PHEL 

RP# High Recovery to 
CE X # Going Low 

^EHCH 

Write Recovery before 
Read 

WvJ « 2 

V PP Hold from Valid Status 
Register (CSR, GSR, BSR) 
Data and RY/BY# High 

WqV 1 

Duration of Word/Byte 
Write Operation 

^EHQV 2 

Duration of Block Erase 
Operation 


Notes Min Typ Max Min Typ Max Unit 



0.6 1.2 20 0.6 1.2 20 sec 
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NOTES: 

1 . Read timings during write and erase are the same as for normal read. 

2. Refer to command definition tables for valid address and data values. 

3. Sampled, but not 100% tested. Guaranteed by design. 

4. Write/Erase durations are measured to valid Status Register (CSR) Data. 

5. Word/byte write operations are typically performed with 1 Programming Pulse. 

6. Address and Data are latched on the rising edge of WE# for all command write operations. 

7. CE X # is defined as the latter of CE 0 # or CE.,# going low, or the first of CE 0 # or CE^ going high. 

8. The TBD information will be available in a technical paper. Please contact Intel’s Application Hotline or your local sales 
office for more information. 
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NOTES: 

1 . This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during data write/erase operations. 

4. CE X # is defined as the latter of CE 0 # or CE^ going low or the first of CE 0 # or CE^ going high. 

5. RP# low transition is only to show t RHPL ; not valid for above Read and Write cycles. 

6. Data Write/Erase cycles are asynchronous; CLK and ADV# are ignored. 

7. V pp voltage during data write/erase operations valid at both 12.0V and 5.0V. 

8. Vpp voltage equal to or below V PPLK provides complete flash memory array protection. 


Figure 15. AC Waveforms for CEx#— Controlled Write Operations, 

Illustrating a Two Command Write Sequence Followed by an Extended Status Register Read 
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5.10 Power-Up and Reset Timings 



Symbol 

Parameter 

Notes 

Min 

Max 

Unit 

tpL5V 

RP# Low to V cc at 4.5V (Minimum) 

2 

0 


|js 

am 

RP# Low to V cc at 3.0V (Minimum) 

2 

0 


MS 


V cc at 4.5V Minimum) to RP# High 

1 

2 


MS 

Wph 

V cc at 3.0V (Minimum) to RP# High 

1 

2 


MS 


NOTES: 

1 . The t 5VPH and/or t 3VPH times must be strictly followed to guarantee all other read and write specifications for the 28F016XS. 

2. The power supply may start to switch concurrently with RP# going low. 
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5.1 1 Erase and Word/Byte Write Performance^ 4 ) 

V cc = 3.3V ± 0.3V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypC) 

Max 

Units 

Test Conditions 

^whrh^A 

Byte Write Time 

2,5 

TBD 

29 

TBD 

MS 


^WHRH^B 

Word Write Time 

2,5 

TBD 

35 

TBD 

ps 


SSES9 

Block Write Time 

2,5 

TBD 

3.8 

TBD 

sec 

Byte Write Mode 

Whrh 3 

Block Write Time 

2,5 

TBD 

2.4 

TBD 

sec 

Word Write Mode 


Block Erase Time 

2,5 

TBD 

2.8 

TBD 

sec 



Erase Suspend 
Latency Time to Read 


1.0 

12 

75 

Ms 



V cc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypID 

Max 

Units 

Test Conditions 

WlRH 1 

Word/Byte Write Time 

2,5 

5 

9 

TBD 

MS 


t\/VHRH 2 

Block Write Time 

2,5 

TBD 

1.2 

4.2 

sec 

Byte Write Mode 

IBIS 

Block Write Time 

2,5 

TBD 

0.6 

2.0 

sec 

Word Write Mode 


Block Erase Time 

2 

0.6 

1.6 

20 

sec 



Erase Suspend 
Latency Time to Read 


1.0 

9 

55 

Ms 



144 


ADVANCE INFORMATION 
























































































28F016XS Flash Memory 





V cc = 5.0V ± 0.5V, Vpp = 5.0V ± 0.5V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 

*whrh1A 

Byte Write Time 

2,5 

TBD 

20 

TBD 

ps 


twHRH 1 B 

Word Write Time 

2,5 

TBD 

25 

TBD 

ps 


twHRH 2 

Block Write Time 

2,5 

TBD 

2.8 

TBD 

sec 

Byte Write Mode 

E999EI 

Block Write Time 

2,5 

TBD 

1.7 

TBD 

sec 

Word Write Mode 


Block Erase Time 

2,5 

TBD 

2.0 

TBD 

sec 



Erase Suspend 
Latency Time to Read 


1.0 

9 

55 

ps 



V cc = 5.0V ± 0.5V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 

twHRH 1 

Word/Byte Write Time 

2,5 

mm 

6 

TBD 

ps 



Block Write Time 

2,5 

TBD 

0.8 

ma 

sec 

Byte Write Mode 

twHRH 3 

Block Write Time 

2,5 

TBD 

0.4 

2.0 

sec 

Word Write Mode 


Block Erase Time 

2 

0.6 

1.2 

20 

sec 



Erase Suspend 
Latency Time to Read 


1.0 

■ 

40 

ps 



NOTES: 

1 . 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Sampled, but not 100% tested. Guaranteed by design. 

5. The TBD information will be available in a technical paper. Please contact Intel’s Application Hotline or your local sales 
office for more information. 
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6.0 MECHANICAL SPECIFICATIONS 



Family: Thin Small Out-Line Package 

Symbol 

Millimeters 

Notes 

Minimum 

Nominal 

Maximum 

A 



1.20 



Ai 

0.50 




A2 

0.965 

0.995 

1.025 


b 

0.100 

0.150 

0.200 


c 

0.115 

0.125 

0.135 


Di 

18.20 

18.40 

18.60 


E 

13.80 

14.00 

14.20 


e 


0.50 



D 

19.80 

20.00 

20.20 


L 

0.500 

0.600 

0.700 


N 


56 



0 

0° 

3° 

5° 


Y 



0.100 


Z 

0.150 

0.250 

0.350 
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DEVICE NOMENCLATURE AND ORDERING INFORMATION 


Product line designator for all Intel Flash products 

i — 1 — i 


E28F016X* 

5-15 


V h 

r-J 1 t 1 


Package 

Period of Maximum CLK 


E = TSOP 

Input Frequency (ns) 



1“ Device Type 

S = Synchronous Pipelined 



Interface 

0532_20 


Option 

Order Code 

1 

E28F016XS15 

2 

E28F016XS20 


Valid Combinations 

Vcc = 3.3V ± 0.3V, 
50 pF load, 
1.5V I/O Levels^) 

Vcc = 5.0V ±10%, 
100 pF load 
TTL I/O Levels^ 

Vcc = 5.0V ±10%, 
30 pF load 
1.5V I/O Levels* 1 ) 


28F016XS-20 


28F016XS-25 


28F016XS-15 


28F016XS-20 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

297372 

16-Mbit Flash Product Family User’s Manual 

292165 

AB-62, “Compiling Optimized Code for Embedded Flash RAM Memories” 

292126 

AP-360, “16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/SV/XD/XS” 

292147 

AP-398, "Designing with the 28F016XS" 

292146 — 

AP-600, "Performance Benefits and Power/Energy Savings of 28F016XS 
Based System Designs" 

292163 

AP-610, “Flash Memory In-System Code and Data Update Techniques” 

297500 

"Interfacing the 28F016XS to the i960® Microprocessor Family" 

297504 

"Interfacing the 28F016XS to the Intel486™ Microprocessor Family" 

294016 

ER-33, “ETOX™ Flash Memory Technology— Insight to Intel’s Fourth 
Generation Process Innovation” 

297508 

FLASHBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

Flash Cycling Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS iBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XS VHDLA/erilog Models 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Orcad/Viewlogic Schematic Symbols 
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DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Removed support of the following features: 

• All page buffer operations (read, write, programming, Upload Device Information) 

• Command queuing 

• Software Sleep and Abort 

• Erase all Unlocked Blocks and Two-Byte Write 

o RY/BY# Configuration as part of the Device Configuration command 

Changed definition of “NC.” Removed “No internal connection to die” from description. 

Added “xx” to Upper Byte of Command (Data) Definition in Sections 4.3 and 4.4. 

Modified parameters “V” and “1” of Section 5.1 to apply to “NC” pins. 

Increased Ippr (Vpp Read Current) for Vpp > Vcc to 200 pA at Vcc = 3.3V/5.0V. 

Changed Vcc = 5.0V DC Characteristics (Section 5.5) marked with Note 1 to indicate 
that these currents are specified for a CMOS rise/fall time (10% to 90%) of <5 ns 
and a TTL rise/fall time of <10 ns. 

Corrected tpHCH (RP# High to CLK) to be a “Min” specification at Vcc = 3.3V/5.0V. 

Corrected the graphical representation of twHCH and tEHCH in Figures 14 and 15. 

Increased Typical “Byte/Word Write Times” (twHRHiA/twHRHiB) for Vpp = 5.0V (Sec. 5.13): 
twHRHiA from 16.5 ps to 29.0 ps and twHRHiB from 24.0 ps to 35.0 ps at 
Vcc = 3.3V 

twHRHiA from 1 1 .0 ps to 20.0 ps and twHRHiB from 1 6.0 ps to 25.0 ps at 
Vcc = 5.0V. 

Increased Typical “Block Write Times” (twHRH 2 / twHRrn) for Vpp = 5.0V (Section 5.13): 
twHRH 2 from 2.2 sec to 3.8 sec and twHRH 3 from 1 .6 sec to 2.4 sec at Vcc = 3.3V 
twHRH 2 from 1 .6 sec to 2.8 sec and twHRH 3 from 1 .2 sec to 1 .7 sec at Vcc = 5.0V. 

Changed ‘Time from Erase Suspend Command to WSM Ready” spec name to “Erase 
Suspend Latency Time to Read”; Modified typical values and Added Min/Max 
values at Vcc =3.3/5.0V and Vpp =5.0/1 2.0V (Section 5.13). 

Minor cosmetic changes throughout document. 
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28F016XD 

16-MBIT (1 MBIT x 16) 

DRAM-INTERFACE FLASH MEMORY 


a 85 ns Access Time (t RAC ) 

— Supports both Standard and Fast- 
Page-Mode Accesses 

m Multiplexed Address Bus 

— RAS# and CAS# Control Inputs 

a No-Glue Interface to Many Memory 
Controllers 

□ SmartVoltage Technology 

— User-Selectable 3.3V or 5V V cc 
— User-Selectable 5V or 12V V PP 

□ 0.33 MB/sec Write Transfer Rate 

□ xl 6 Architecture 


a 56-Lead TSOP Type I Package 

□ Backwards-Compatible with 28F008SA 
Command Set 

a 2 pA Typical Deep Power-Down Current 

a 1 mA Typical l cc Active Current in Static 
Mode 

m 32 Separately-Erasable/Lockable 
64-Kbyte Blocks 

□ 1 Million Erase Cycles per Block 

b State-of-the-Art 0.6 pm ETOX™ IV Flash 
Technology 


Intel’s 28F016XD 16-Mbit Flash memory is a revolutionary architecture which is the ideal choice for designing 
truly revolutionary high-performance products. Combining its DRAM-like read performance and interface with 
the intrinsic nonvolatility of flash memory, the 28F016XD eliminates the traditional redundant memory 
paradigm of shadowing code from a slow nonvolatile storage source to a faster execution memory, such as 
DRAM, for improved system performance. The innovative capabilities of the 28F016XD enable the design of 
direct-execute code and mass storage data/file flash memory systems. 

The 28F016XD’s DRAM-like interface with a multiplexed address bus, flexible V cc and V PP voltages, power 
saving features, extended cycling, fast write and read performance, symmetrically blocked architecture, and 
selective block locking provide a highly flexible memory component suitable for resident flash component 
arrays on the system board or SIMMs. The DRAM-like interface with RAS# and CAS# control inputs allows 
for easy migration to flash memory in existing DRAM-based systems. The 28F016XD’s dual read voltage 
allows the same component to operate at either 3.3V or 5.0V V cc . Programming voltage at 5V V PP minimizes 
external circuitry in minimal-chip, space critical designs, while the 12V V PP option maximizes write/erase 
performance. The x16 architecture allows optimization of the memory-to-processor interface. Its high read 
performance combined with flexible block locking enable both storage and execution of operating 
systems/application software and fast access to large data tables. The 28F016XD is manufactured on Intel’s 
0.6 pm ETOX™ IV process technology. 


Order Number 290533-002 
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1.0 INTRODUCTION 

The documentation of the Intel 28F016XD flash 
memory device includes this datasheet, a detailed 
user’s manual, and a number of application notes 
and design tools, all of which are referenced at the 
end of this datasheet. 

The datasheet is intended to give an overview of 
the chip feature-set and of the operating AC/DC 
specifications. The 16-Mbit Flash Product Family 
User’s Manual provides complete descriptions of 
the user modes, system interface examples and 
detailed descriptions of all principles of operation. 
It also contains the full list of software algorithm 
flowcharts, and a brief section on compatibility 
with the Intel 28F008SA. 

Significant 28F016XD feature revisions occurred 
between datasheet revisions 290533-001 and 
290533-002. These revisions center around 
removal of the following features: 

® All page buffer operations (read, write, 
programming, Upload Device Information) 

® Command queuing 
• Software Sleep and Abort 
® Erase all Unlocked Blocks 
® Device Configuration command 

Intel recommends that all customers obtain the 
latest revisions of 28F016XD documentation. 


1 .1 Product Overview 

The 28F016XD is a high-performance, 16-Mbit 
(16,777,216-bit) block erasable, nonvolatile 
random access memory, organized as 
1 Mword x 16. The 28F016XD includes thirty-two 
32- KW (32,768 word) blocks. A chip memory map 
is shown in Figure 3. 

The implementation of a new architecture, with 
many enhanced features, will improve the device 
operating characteristics and result in greater 
product reliability and ease-of-use as compared to 
other flash memories. Significant features of the 
28F016XD include: 

® No-Glue Interface to Memory Controllers 
® Improved Word Write Performance 


• SmartVoltage Technology 

— Selectable 3.3V or 5.0V V cc 
— Selectable 5.0V or 12.0V V PP 

• Internal 3.0V/5.0V V cc Detection Circuitry 
® Block Write/Erase Protection 

The 28F016XD's multiplexed address bus with 
RAS# and CAS# inputs allows for a “No Glue” 
interface to many existing in-system memory 
controllers. As such, 28F016XD-based SIMMs 
(72-pin JEDEC Standard) offer attractive 
advantages over their DRAM counterparts in many 
applications. For more information on 28F016XD- 
based SIMM designs, see the application note 
referenced at the end of this datasheet. 

The 28F016XD incorporates SmartVoltage 
technology, providing V cc operation at both 3.3V 
and 5.0V and program and erase capability at 
V PP = 12.0V or 5.0V. Operating at V cc = 3.3V, the 
28F016XD consumes less than 60% of the power 
consumption at 5.0V V cc , while 5.0V V cc provides 
the highest read performance capability. 
V pp = 5.0V operation eliminates the need for a 
separate 12.0V converter, while V PP = 12.0V 
maximizes write/erase performance. In addition to 
the flexible program and erase voltages, the 
dedicated V PP gives complete code protection with 
V PP <V PPLK . 

Internal 3.3V or 5.0V V cc detection automatically 
configures the device for optimized 3.3V or 5.0V 
read/write operation. 

A Command User Interface (CUI) serves as the 
system interface between the microprocessor or 
microcontroller and the internal memory operation. 

Internal Algorithm Automation allows word writes 
and block erase operations to be executed using a 
Two-Write command sequence to the CUI in the 
same way as the 28F008SA 8-Mbit FlashFile™ 
memory. 

Software Locking of Memory Blocks is an added 
feature of the 28F016XD as compared to the 
28F008SA. The 28F016XD provides selectable 
block locking to protect code or data such as 
direct-executable operating systems or application 
code. Each block has an associated nonvolatile 
lock-bit which determines the lock status of the 
block. In addition, the 28F016XD has a master 
Write Protect pin (WP#) which prevents any 
modifications to memory blocks whose lock-bits 
are set. 
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Writing of memory data is performed in word 
increments typically within 6 psec (12.0V V PP )-a 
33% improvement over the 28F008SA. A block 
erase operation erases one of the 32 blocks in 
typically 0.6 sec (12.0V V PP ), independent of the 
other blocks, which is about a 65% improvement 
over the 28F008SA. 

Each block can be written and erased a minimum 
of 100,000 cycles. Systems can achieve one 
million Block Erase Cycles by providing wear- 
leveling algorithms and graceful block retirement. 
These techniques have already been employed in 
many flash file systems and hard disk drive 
designs. 

All operations are started by a sequence of Write 
commands to the device. Three types of Status 
Registers (described in detail later in this 
datasheet) and a RY/BY# output pin provide 
information on the progress of the requested 
operation. 

The following Status Registers are used to provide 
device and WSM information to the user : 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory Status Register. The CSR, when used 
alone, provides a straightforward upgrade 
capability to the 28F01 6XD from a 28F008SA- 
based design. 

• A Global Status Register (GSR) which also 
informs the system of overall Write State 
Machine (WSM) status. 

• 32 Block Status Registers (BSRs) which 
provide block-specific status information such 
as the block lock-bit status. 

The GSR and BSR memory maps are shown in 
Figure 4. 


The 28F016XD incorporates an open drain 
RY/BY# output pin. This feature allows the user to 
OR-tie many RY/BY# pins together in a multiple 
memory configuration such as a Resident Flash 
Array. 

The 28F016XD is specified for a maximum fast 
page mode cycle time of 65 ns (t PC R ) at 5.0V 
operation (4.75V to 5.25V) over the commercial 
temperature range (0°C to +70°C). A 
corresponding maximum fast page mode cycle 
time of 75 ns at 3.3V (3.0V to 3.6V and 0°C to 
+70°C) is achieved for reduced power 
consumption applications. 

The 28F016XD incorporates an Automatic Power 
Saving (APS) feature, which substantially reduces 
the active current when the device is in static 
mode of operation (addresses not switching). In 
APS mode, the typical l cc current is 1 mA at 5.0V 
(3.0 mA at 3.3V). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) 
pin transitions low. This mode brings the device 
power consumption to less than 2.0 pA, typically, 
and provides additional write protection by acting 
as a device reset pin during power transitions. A 
reset time of 300 ns (5.0V V cc operation) is 
required from RP# switching high until dropping 
RAS#. In the Deep Power-Down state, the WSM is 
reset (any current operation will abort) and the 
CSR, GSR and BSR registers are cleared. 

A CMOS standby mode of operation is enabled 
when RAS# and CAS# transition high and RP# 
stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
l cc standby current of 70 pA at 5V V cc . 

The 28F016XD is available in a 56-Lead, 1.2mm 
thick, 14mm x 20mm TSOP Type I package. This 
form factor and pinout allow for very high board 
layout densities. 


2.0 DEVICE PINOUT 

The 28F016XD 56-Lead TSOP Type I pinout 
configuration is shown in Figure 2. 
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Figure 1. 28F016XD Block Diagram 
Architectural Evolution Includes Multiplexed Address Bus, 
SmartVoltage Technology, and Extended Registers 
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Figure 2. 28F016XD 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

A0-A9 

INPUT 

MULTIPLEXED ROW/COLUMN ADDRESSES: Selects a word within 
one of thirty-two 32-Kword blocks. Row (upper) addresses are latched on 
the falling edge of RAS#, while column (lower) addresses are latched on 
the falling edge of CAS#. 

DQ0-DQ15 

INPUT/OUTPUT 

DATA BUS: Inputs data and commands during CUI write cycles. Outputs 
array, identifier or status data (DQ0-7) in the appropriate read mode. 
Floated when the chip is de-selected or the outputs are disabled. 

RAS# 

INPUT 

ROW ADDRESS STROBE: Latches row address information on inputs 
Ag-o when RAS# transitions low. A subsequent CAS# low transition 
initiates 28F016XD read or write operations. 

CAS# 

INPUT 

COLUMN ADDRESS STROBE: Latches column address information on 
inputs Ag. 0 when CAS# transitions low. When preceded by a RAS# low 
transition, CAS# low initiates 28F016XD read or write operations, along 
with OE# and WE#. Subsequent CAS# low transitions, with RAS# held 
low, enable fast page mode reads/writes 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that consume static power, even those circuits 
enabled in standby mode, are turned off. When returning from Deep 
Power-Down, a recovery time of 300 ns at 5.0V V cc is required to allow 
these circuits to power-up. 

When RP# goes low, the current WSM operation is terminated, and the 
device is reset. All Status Registers return to ready (with all status flags 
cleared). 

Exit from Deep Power-Down places the device in read array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when 
low in combination with RAS# and CAS# low. The outputs float to tri-state 
off when OE# is high. OE# can be tied to GND if not controlled by the 
system memory controller. RAS# and CAS# high override OE# low. WE# 
low also overrides OE# low. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Data Register and Address 
Latch. WE# is active low and initiates writes in combination with RAS# 
and CAS# low. WE# low overrides OE# low. RAS# and CAS# high 
override WE# low. 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it 
indicates that the WSM is busy performing an operation. RY/BY# floating 
indicates that the WSM is ready for new operations, Erase is Suspended, 
or the device is in deep power-down mode. This output is always active 
(i.e., not floated to tri-state off when OE#, RAS# or CAS# are high). 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile 
lock-bit for each block. When WP# is low, those locked blocks as 
reflected by the Block-Lock Status bits (BSR.6), are protected from 
inadvertent Data Writes or Erases. When WP# is high, all blocks can be 
written or erased regardless of the state of the lock-bits. The WP# input 
buffer is disabled when RP# transitions low (deep power-down mode). 
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2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

Q. 

0. 

> 

SUPPLY 

WRITE/ERASE POWER SUPPLY (12.0V ± 0.6V, 5.0V ± 0.5V): For 

erasing memory array blocks or writing words into the flash array. V PP = 
5.0V ± 0.5V eliminates the need for a 1 2V converter, while connection to 
12.0V ± 0.6V maximizes Write/Erase Performance. 

NOTE: 

Successful completion of write and erase attempts is inhibited with V PP at 
or below 1 .5V. Write and Erase attempts with V PP between 1 .5V and 
4.5V, between 5.5V and 1 1.4V, and above 12.6V produce spurious 
results and should not be attempted. 

Vcc 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V): 

Internal detection configures the device for 3.3V or 5.0V operation. To 
switch 3.3V to 5.0V (or vice versa), first ramp V cc down to GND, and then 
power to the new V cc voltage. 

Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 

NC 


NO CONNECT: 

Lead may be driven or left floating. 
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3.0 MEMORY MAPS 


A (19-0) 


FFFFF 

FBOOO 

32-Kword Block 

31 

F7FFF 

FOOOO 

32-Kword Block 

30 

EFFFF 

E8000 

32-Kword Block 

29 

E7FFF 

EOOOO 

32-Kword Block 

28 

DFFFF 

D8000 

32-Kword Block 

27 

D7FFF 

D0000 

32-Kword Block 

26 

CFFFF 

C6CXX) 

32-Kword Block 

25 

C7FFF 

COOOO 

32-Kword Block 

24 

BFFFF 

B8000 

32-Kword Block 

23 

B7FFF 

BOOOO 

32-Kword Block 

22 

A8FFF 

A8000 

32-Kword Block 

21 

A7FFF 

AOOOO 

32-Kword Block 

20 

9FFFF 

98000 

32-Kword Block 

19 

97FFF 

90000 

32-Kword Block 

18 

BFFFF 

88000 

32-Kword Block 

17 

87FFF 

80000 

32-Kword Block 

16 

7FFFF 

78000 

32-Kword Block 

15 

77FFF 

70000 

32-Kword Block 

14 

6FFFF 

68000 

32-Kword Block 

13 

67FFF 

60000 

32-Kword Block 

12 

5FFFF 

58000 

32-Kword Block 

11 

57FFF 

50000 

32-Kword Block 

10 

4FFFF 

48000 

32-Kword Block 

9 

47FFF 

40000 

32-Kword Block 

8 

3FFFF 

38000 

32-Kword Block 

7 

37FFF 

30000 

32-Kword Block 

6 

2FFFF 

28000 

32-Kword Block 

5 

27FFF 

20000 

32-Kword Block 

4 

1FFFF 

18000 

32-Kword Block 

3 

17FFF 

10000 

32-Kword Block 

2 

OFFFF 

08000 

32-Kword Block i 

07FFF 

00000 

32-Kword Block 



NOTE: 

The upper 10 bits (A-|g_ 10 ) reflect 28F016XD addresses Ag_o, latched by RAS#. 

The lower 10 bits (Ag_Q) reflect 28F016XD addresses Ag^, latched by CAS#. 

Figure 3. 28F016XD Memory Map 
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07FFFH 

00003H 
00002H 
00001 H 
00000H 

NOTE: 

The upper 10 bits (Aig_ 10 ) reflect 28F016XD addresses Aq_q, latched by RAS#. 

The lower 1 0 bits (Ag^p) reflect 28F01 6XD addresses A 9 _q, latched by CAS#. 

Figure 4. Extended Status Registers Memory Map 



0533_04 
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4.0 BUS OPERATIONS, COMMANDS AND STATUS REGISTER DEFINITIONS 


4.1 Bus Operations 


Mode 

Notes 

RP# 

RAS# 

CAS# 

OE# 

WE# 

D Q(M5 

RY/BY# 

Row Address Latch 

1,2,9 

V,H 

4 

V,H 

X 

X 

X 

X 

Column Address Latch 

1 , 2,9 

V|H 

V,L 

4 

X 

X 

X 

X 

Read 

1,2,7 

V,H 

V|L 

V,L 

V,L 

V|H 

Dout 

X 

Output Disable 

1,6,7 

V,H 

V,L 

V,L 

V,H 

V,H 

High Z 

X 

Standby 

1,6,7 

V,H 

V|H 

V,H 

X 

X 

High Z 

X 

Deep Power-Down 

1,3 

V| L 

X 

X 

X 

X 

High Z 

■ x 
0 
> 

Manufacturer ID 

4,8 

V, H 

V|L 

V,L 

V,L 

V,H 

0089H 

Voh 

Device ID 

4,8 

V,H 

V|L 

V|L 

V,L 

V,H 

66A8H 

V OH 

Write 

1,5,6 

V|H 

V,L 

V|L 

X 

V|L 

°IN 

X 


NOTES: 

1 . X can be Vih or Vil for address or control pins except for RY/BY#, which is either Vol or Voh, or High Z or Dout for data 
pins depending on whether or not OE# is active. 

2. RY/BY# output is open drain. When the WSM is ready, Erase is suspended or the device is in deep power-down mode,, 
RY/BY# will be at Voh if it is tied to Vcc through a resistor. RY/BY# at Voh is independent of OE# while a WSM operation 
is in progress. 

3. RP# at GND± 0.2V ensures the lowest deep power-down current. 

4. Ao (latched by CAS#) at Vil provides the Manufacturer ID code. Ao (latched by CAS#) at Vih provides the Device ID code. 
All other addresses (row and column) should be set to zero. 

5. Commands for erase, data write, or lock-block operations can only be completed successfully when Vpp = Vpphi or 
Vpp = VppH2- 

6. While the WSM is running, RY/BY# stays at Vol until all operations are complete. RY/BY# goes to Voh when the WSM is 
not busy or in erase suspend mode. 

7. RY/BY# may be at Vol while the WSM is busy performing various operations (for example, a Status Register read during a 
write operation). 

8. The 28F01 6XD shares an identical device identifier with the 28F01 6XS. 

9. Row (upper) addresses are latched via inputs A0-9 on the falling edge of RAS#. Column (lower) addresses are latched via 
inputs A0-9 on the falling edge of CAS#. Row addresses must be latched before column addresses are latched. 
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4.2 28F008SA— Compatible Mode Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data' 41 

Oper 

Addr 

Data (4) 

Read Array 


Write 

X 

xxFFH 

Read 

AA 

AD 

Intelligent Identifier 

1 

Write 

X 

xx90H 

Read 

IA 

ID 

Read Compatible Status Register 

2 

Write 

X 

xx70H 

Read 

X 

CSRD 

Clear Status Register 

3 

Write 

X 

xx50H 




Word Write 


Write 

X 

xx40H 

Write 

WA 

WD 

Alternate Word Write 


Write 

X 

xxlOH 

Write 

WA 

WD 

Block Erase/Confirm 


Write 

X 

xx20H 

Write 

BA 

xxDOH 

Erase Suspend/Resume 


Write 

X 

xxBOH 

Write 

X 

xxDOH 


ADDRESS 

AA = Array Address 
BA = Block Address 
IA = Identifier Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
CSRD = CSR Data 
ID = Identifier Data 
WD = Write Data 


NOTES: 

1 . Following the Intelligent Identifier command, two read operations access the manufacturer and device signature codes. 

2. The CSR is automatically available after device enters data write, erase, or suspend operations. 

3. Clears CSR.3, CSR.4 and CSR.5. Also clears GSR.5 and all BSR.5, BSR.4 and BSR.2 bits. See Status Register 
definitions. 

4. The upper byte of the data bus (D&-15) during command writes is a “Don’t Care.” 

1 ■ r 1 .* * ■ - i iM' n ■ ■ 
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4.3 28F016XD — Enhanced Command Bus Definitions 


Command 

Notes 

First Bus Cycle 

Second Bus Cycle 

Oper 

Addr 

Data (3) 

Oper 

Addr 

Data' 3 ' 

Read Extended Status Register 

1 

Write 

X 

xx71H 

Read 

RA 

GSRD 

BSRD 

Lock Block/Confirm 


Write 

X 

xx77H 

Write 

BA 

xxDOH 

Upload Status Bits/Confirm 

2 

Write 

X 

xx97H 

Write 

X 

xxDOH 


ADDRESS DATA 

BA = Block Address AD = Array Data 

RA = Extended Register Address BSRD = BSR Data 

WA = Write Address GSRD = GSR Data 

X = Don’t Care 

NOTES: 

1 . RA can be the GSR address or any BSR address. See Figure 4 for the Extended Status Register memory map. 

2. Upon device power-up, ail BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. The upper byte of the data bus (Ds-is) during command writes is a “Don’t Care.” 
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4.4 Compatible Status Register 


WSMS 

ESS 

ES 

DWS 

VPPS 

R 

R 

R 

7 

6 

5 

4 

3 

2 

1 

0 



NOTES: 

CSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Erase, 
Erase Suspend, or Data Write) before the 
appropriate Status bit (ESS, ES or DWS) is 
checked for success. 

CSR.6 = ERASE-SUSPEND STATUS 
1 = Erase Suspended 
0 = Erase In Progress/Completed 


CSR.5 = ERASE STATUS 

1 = Error In Block Erasure 
0 = Successful Block Erase 

If DWS and ES are set to “1” during an erase 
attempt, an improper command sequence was 
entered. Clear the CSR and attempt the 
operation again. 

CSR.4 = DATA-WRITE STATUS 
1 = Error in Data Write 
0 = Data Write Successful 


CSR.3 = V PP STATUS 

1 = Vp P Error Detect, Operation Abort 
0 = V PP OK 

The VPPS bit, unlike an A/D converter, does not 
provide continuous indication of V PP level. The 
WSM interrogates Vpp’s level only after the Data 
Write or Erase command sequences have been 
entered, and informs the system if Vpp has not 
been switched on. VPPS is not guaranteed to 
report accurate feedback between VppLK(max) 
and VppHi(min), between VppHi(max) and 
VppH 2 (min) and above VppH 2 (max). 

CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the CSR. 
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4.5 Global Status Register 


WSMS 

OSS 

DOS 

R 

R 

R 

R 

R 


6 5 4 


GSR.7 = WRITE STATE MACHINE STATUS 
1 = Ready 
0 = Busy 


GSR.6 = OPERATION SUSPEND STATUS 
1 = Operation Suspended 
0 = Operation in Progress/Completed 


3 2 10 

NOTES: 

RY/BY# output or WSMS bit must be checked to 
determine completion of an operation (Block 
Lock, Suspend, Upload Status Bits, Erase or 
Data Write) before the appropriate Status bit 
(OSS or DOS) is checked for success. 


GSR.5 = DEVICE OPERATION STATUS 
1 = Operation Unsuccessful 
0 = Operation Successful or Currently 
Running 


GSR.4-0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the GSR. 
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4.6 Block Status Register 



NOTES: 

BSR.7 = BLOCK STATUS 

RY/BY# output or BS bit must be checked to 

1 = Ready 

determine completion of an operation (Block 

0 = Busy 

Lock, Suspend, Erase or Data Write) before the 

BSR.6 = BLOCK LOCK STATUS 

1 = Block Unlocked for Write/Erase 

0 = Block Locked for Write/Erase 

BSR.5 = BLOCK OPERATION STATUS 

1 = Operation Unsuccessful 

0 = Operation Successful or 

Currently Running 

BSR.2 = V PP STATUS 

1 = V PP Error Detect, Operation Abort 
0 = V PP OK 

appropriate Status bits (BOS, BLS) is checked 
for success. 

BSR.1 = V PP LEVEL 

BSR.1 is not guaranteed to report accurate 

1 = V PP Detected at 5.0V ± 10% 

feedback between the V PPH1 and Vp PH2 voltage 

0 = V PP Detected at 12.0V ± 5% 

ranges. Writes and erases with V PP between 
v PPLK( max ) and VppHi (min), between 
V PPH1 (max) and Vp PH 2 (min), and above 
V P pH 2 (m a x) produce spurious results and should 
not be attempted. 

BSR.1 was a RESERVED bit on the 28F016SA. 

BSR.4,3,0 = RESERVED FOR FUTURE ENHANCEMENTS 

These bits are reserved for future use; mask them out when polling the BSRs. 



R VPPS VPPL R 

3 2 10 
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*WARNING: Stressing the device beyond the 
“Absolute Maximum Ratings” may cause 
permanent damage. These are stress ratings 
oniy. Operation beyond the “Operating 
Conditions ” is not recommended and extended 
exposure beyond the "Operating Conditions" may 
affect device reliability. 


V cc = 3.3V ± 0.3V Systems 


Sym 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

B 

Ambient Temperature 

< 

o 

o 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


CL 

Q. 

> 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CC ,V PP ) with 
Respect to GND 

2,5 

-0.5 

Vcc 
+ 0.5 

V 


D 

Current into any Non-Supply Pin 

5 


±30 

mA 


m 

Output Short Circuit Current 

4 


100 

mA 



NOTICE: This datasheet contains information on 
products in the sampling and initial production 
phases of development. The specifications are 
subject to change without notice. Verify with your 
local Intel Sales office that you have the latest 
datasheet before finalizing a design. 




5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to +80°C 

Storage Temperature -65°C to +125°C 


V cc = 5.0V ± 0.5V Systems 


Sym 

' Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

B 

Ambient Temperature 

< 

O 

O 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


Q_ 

CL 

> 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CC ,V PP ) with 
Respect to GND 

2,5 

-2.0 

7.0 

V 


■ 

Current into any Non-Supply Pin 

5 


±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 


1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods <20 ns. 
Maximum DC voltage on input/output pins is V cc + 0.5V which, during transitions, may overshoot to V cc + 2.0V for periods 
<20 ns. 

3. Maximum DC voltage on V pp may overshoot to +14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. This specification also applies to pins marked “NC.” 
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5.2 Capacitance 


For a 3.3V ± 0.3V System: 


Sym 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C IN 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 


C OUT 

Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 


C LOAD 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 

■ 

50 

PF 



For 5.0V ± 0.5V System: 


Sym 

Parameter 

Notes 

Typ 

Max 

Units 

Test Conditions 

C IN 

Capacitance Looking into an 
Address/Control Pin 

1 

6 

8 

PF 


C OUT 

Capacitance Looking into an 
Output Pin 

1 

8 

12 

PF 

T a = 25°C, f= 1.0 MHz 

C|_OAD 

Load Capacitance Driven by 
Outputs for Timing Specifications 

1,2 

■ 

100 

PF 



NOTE: 

1. Sampled, not 100% tested. 

2. To obtain iBIS models for the 28F016XD, please contact your local Intel/Distribution Sales Office. 
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5.3 Transient Input/Output Reference Waveforms 



Figure 5. Transient Input/Output Reference Waveform for V cc = 5.0V ± 0.5VC 1 ) 



Figure 6. Transient Input/Output Reference Waveform for V cc = 3.3V ± 0.3V( 2 ) 

NOTES: 

1. Testing characteristics for 28F016XD-85. 

2. Testing characteristics for 28F016XD-95. 
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5.4 DC Characteristics 

V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•cc 1 

Vcc Word Read 
Current 

1,4,5 


50 

70 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V, L 
RAS#, CAS#, Addr. Cycling @ 
t RC = min 
Iout = 0 mA 
Inputs = TTL or CMOS 

o 

o 

ro 

V C c Standby Current 

1,5 

■ 

1 

■ 

mA 

V CC = V cc Max 
RAS#, CAS#, RP# = V| H 
WP# = V| L or V|h 

1 

V cc RAS#-Only 
Refresh Current 

1,5 

1 

50 

70 

mA 

Vcc = Vcc Max 
CAS# = V,h 
RAS# = V, L 

RAS#, Addr. Cycling @t RC = min 
Inputs = TTL or CMOS 

•cc 4 

V C c Fast Pa 9 e Mode 
Word Read Current 

1,4,5 

1 

40 

60 

mA 

Vcc = Vcc Max 

RAS#, CAS# = V, L 

CAS#, Addr. Cycling @t PC = min 

Iout = 0 mA 

Inputs = V !L or V !H 

■ 

V C c Standby Current 

1,5 

1 

70 

130 

pA 

v cc = v cc Max 

RAS# CAS# RP# = V cc ± 0.2V 
WP# = V cc ± 0.2V or GND ± 
0.2V 


V cc CAS#-before- 
RAS# Refresh Current 

1,5 

1 

40 

55 

mA 

Vcc = Vcc Max 
CAS#, RAS# = V, L 
CAS#, RAS#, Addr. Cycling @t RC 
= min 

Inputs = TTL or CMOS 

•cc 7 

V cc Standby Current 
(Self Refresh Mode) 

1,5 

1 

40 

55 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V| L 
*out = 0 nnA 
Inpuis = V| L or V| H 

m 

Input Load Current 

1 

■ 

■ 

±1 

pA 

Vcc = Vcc Max 
V IN = V cc or GND 

•lo 

Output Leakage 
Current 

1 



±10 

pA 

Vcc = Vcc Max 
Vout = Vcc or GND 

•CCD 

V C c Deep Power-Down 
Current 

1 

■ 

2 

5 

pA 

RP# = GND ± 0.2V 
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5.4 DC Characteristics (Continued) 
V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 
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NOTES: 

1 . All currents are in RMS unless otherwise noted. Typical values at V cc = 3.3V, V PP = 12.0V or 5.0V, T = 25°C. 

2. Icces ,s specified with the device de-selected. If the device is read while in Erase Suspend mode, current draw is the 
sum of Icces anc * l cci^cc 4 - 

3. Block erases, word writes and lock block operations are inhibited when V PP = V PPLK and not guaranteed in the ranges 
between VppLK(max) and Vppm(min), between VppHi(max) and VppH2(min), and above VppH2(max). 

4. Automatic Power Saving (APS) reduces Icci and lcC4 to 3.0 mA typical in static operation. 

5. CMOS inputs are either Vcc ± 0.2V or GND ± 0.2V. TTL inputs are either Vil or Vih. 

6. Sampled, but not 100% tested. Guaranteed by design. 
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5.5 DC Characteristics 

V cc = 5.0V ± 0.5V, T a = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Unit 

Test Condition 

•cc 1 

V C c Word Read Current 

1,4,5 

i 

90 

120 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V, L 
RAS#, CAS#, Addr. Cycling @ 
fRC = m,n 
Iout = 0 mA 
Inputs = TTL or CMOS 

C\J 

o 

o 

V cc Standby Current 

1,5 

■ 

2 

■ 

mA 

Vcc = Vcc Max 
RAS#, CAS#, RP# = V, H 
WP# = V, L or V| H 

I 

V cc RAS#-Only 
Refresh Current 

1,5 


90 

120 

mA 

Vcc = Vcc Max 
CAS# = V, H 
RAS# = V, L 

RAS#, Addr. Cycling @t RC = min 
Inputs = TTL or CMOS 

lee 4 

V cc Fast Page Mode 
Word Read Current 

1,4,5 


80 

110 

mA 

Vcc = Vcc Max 

RAS#, CAS# = V, L 

CAS#, Addr. Cycling @t PC = min 

loUT = 0 m A 

Inputs = V| L or V, H 

■ 

V cc Standby Current 

1,5 


70 

130 

pA 

Vcc = Vcc Max 

RAS#, CAS#, RP# = V cc ± 0.2V 
WP# = V cc ± 0.2V or 
GND ± 0.2V 

CO 

o 

o 

V cc CAS#-before- 
RAS# Refresh Current 

1,5 


50 

65 

mA 

Vcc = Vcc Max 
CAS#, RAS# = V, L 
CAS#, RAS#, Addr. Cycling @t RC 
= min 

inputs = TTL or CMOS 

■ 

V cc Standby Current 
(Self Refresh Mode) 

1,5 


50 

65 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V, L 
iouT = 0 mA 
Inputs = V| L or V iH 

■ 

Input Load Current 

1 



±1 

pA 

Vcc = Vcc Max 
V|n = Vcc Of GND 

m 

Output Leakage 
Current 

1 

■ 


±10 

pA 

Vcc = Vcc Max 
Vout = Vcc or GND 

•CCD 

V cc Deep Power-Down 
Current 

1 


2 

5 

pA 

RP# = GND ± 0.2V 

•ccw 

V cc Word Write Current 

1,6 

■ 

25 

35 

mA 

Word Write in Progress 
V PP = 12.0V ±5% 

■ 

25 

40 

mA 

Word Write in Progress 
V PP = 5.0V ± 1 0% 
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5.5 DC Characteristics (Continued) 

V cc = 5.0V ± 0.5V, T A = 0°C to +70°C 
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NOTES: 

1. All currents are in RMS unless otherwise noted. Typical values at V cc = 5.0V, V PP = 12.0V or 5.0V, T = 25°C. These 
currents are specified for a CMOS rise/fall time (10% to 90%) of <5 ns and a TTL rise/fall time of <10 ns. 

2. IccES is specified with the device de-selected. If the device is read while in Erase Suspend mode, current draw is the 
sum of Iqces anc * lcci^CC4- 

3. Block erases, word writes and lock block operations are inhibited when V PP = V PPLK and not guaranteed in the ranges 
between V PPLK (max) and V PPH1 (min), between V PP m(rnax) and VppH 2 (min), and above VppH 2 (nnax). 

4. Automatic Power Saving (APS) reduces I CC1 and Iqq 4 to 1 mA typical in static operation. 

5. CMOS inputs are either V cc ± 0.2 V or GND ± 0.2V. TTL inputs are either V iL or V !H . 

6. Sampled, not 100% tested. Guaranteed by design. 
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5.6 AC Character isticsO 11 ) 

V cc = 3.3V ± 0.3V, T A = 0°C to +70°C 

Read, Write, Read-Modify-Write and Refresh Cycles (Cbnrimon Parameters) 


Versions 

28F01 6XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

tRP 

RAS# precharge time 


10 


ns 

tcp 

CAS# precharge time 


15 


ns 

tASR 

Row address set-up time 

9 

0 


ns 

tRAH 

Row address hold time 

9 

15 


ns 

tASC 

Column address set-up time 

9 

0 


ns 

tCAH 

Column address hold time 

9 

20 


ns 

tAR 

Column address hold time referenced to RAS# 

3,9 

35 


ns 

tRAD 

RAS# to column address delay time 

8,9 

15 

15 

ns 

tCRP 

CAS# to RAS# precharge time 


10 


ns 

tOED 

OE# to data delay 

10 

30 


ns 

fezo 

OE# delay time from data-in 

10 

0 


ns 

tDZC 

CAS# delay time from data-in 

10 

0 


ns 

tT 

Transition time (rise and fall) 

10 

2 

4 

ns 



Read Cycle 


Versions 

28F01 6XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

tRC(R) 

Random read cycle time 


105 


ns 

tRAS(R) 

RAS# pulse width (reads) 


95 

oo 

ns 

tCAS(R) 

CAS# pulse width (reads) 


40 

oo 

ns 

tRCD(R) 

RAS# to CAS# delay time (reads) 

1 

15 

55 

ns 

tRSH(R) 

RAS# hold time (reads) 


30 


ns 

tcSH(R) 

CAS# hold time (reads) 


95 


ns 

tRAC 

Access time from RAS# 

1,8 


95 

ns 

tCAC 

Access time from CAS# 

1,2 


40 

ns 

tAA 

Access time from column address 

8 


75 

ns 

tOEA 

OE# access time 



40 

ns 
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Read Cycle (Continued) 



Write Cycle 
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Read-Modify-Write Cycle 


Versions 

28F016XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

Irwc 

Read-modify-write cycle time 

10 

200 


ns 

*RWD 

RAS# to WE# delay time 

5,10 

125 


ns 

tcWD 

CAS# to WE# delay time 

5,10 

70 


ns 

Wd 

Column address to WE# delay time 

5,9,10 

105 


ns 

bEH 

OE# command hold time 

10 

15 


ns 


Fast Page Mode Cycle 


Versions 

28F016XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 


Fast page mode cycle time (reads) 


75 


ns 


Fast page mode cycle time (writes) 


80 


ns 

B 

RAS# pulse width (reads) 


95 

oo 

ns 


RAS# pulse width (writes) 


80 

oo 

ns 

*CPA 

Access time from CAS# precharge 



85 

ns 

tcpw 

WE# delay time from CAS# precharge 

10 

0 


ns 

fepRH(R) 

RAS# hold time from CAS# precharge (reads) 


75 


ns 


RAS# hold time from CAS# precharge (writes) 


80 


ns 


Fast Page Mode Read-Modify-Write Cycle 


Versions 

28F016XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 


tpRWC 

Fast page mode read-modify-write cycle time 

10 

170 


ns 
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Refresh Cycle 


Versions 

28F01 6XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

*CSR 

CAS# set-up time (CAS#-before-RAS# refresh) 

10 

10 


ns 

tcHR 

CAS# hold time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*WRP 

WE# setup time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*WRH 

WE# hold time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*RPC 

RAS# precharge to CAS# hold time 

10 

10 


ns 

^RASS 

RAS# pulse width (self-refresh mode) 

10 

0 


ns 

^RPS 

RAS# precharge time (self-refresh mode) 

10 

10 


ns 

*CPN 

CAS# precharge time (self-refresh mode) 

10 

10 


ns 

feHS 

CAS# hold time (self-refresh mode) 

10 

0 


ns 


Refresh 


Versions 

28F01 6XD-95 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

*REF 

Refresh period 

10 


oo 

ms 


Misc. Specifications 


Versions 

28F016XD-95 

Units 

Parameter 

Notes 

Min 

Max 

RP# high to RAS# going low 

10 

480 


ns 

RP# set-up to WE# going low 

10 

480 


ns 

Vpp set-up to CAS# high at end of write cycle 

10 

100 


ns 

WE# high to RY/BY# going low 

10 


100 

ns 

RP# hold from valid status register data and RY/BY# high 

10 

0 


ns 

Vpp hold from valid status register data and RY/BY# high 

10 

0 


ns 
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NOTES: 

1 . Operation within the t RCD ( max ) limit insures that t RAC ( max ) can be met. t RCD ( max ) is specified as a reference point. 

2. Assumes that t RCD >t RC D(max)- 

3. t AR , t W cR. *dhr are referenced to t RAD ( max ). 

4. t 0 FF(max) defines the time at which the output achieves the open circuit condition and is not referenced to V 0R or Vql- 

5. twcs* 1 rwd> 1 cwd and 1 awd are non restrictive operating parameters. They are included in the datasheet as electrical 
characteristics only. If t wcs ^t WCS ( mjn ) the cycle is an early write cycle and the data output will remain high impedance for 
the duration of the cycle. If t CWD >t C WD(min)> l RWD ^RWD(min). l AWD ^AWD(min). then the c '/ cle is a read-write cycle and 
the data output will contain the data read from the selected address. If neither of the above conditions are satisfied, the 
condition of the data out is indeterminate. 

6. Either t RCH or t RRH must be satisfied for a read cycle. 

7. These parameters are referenced to the CAS# leading edge in early write cycles and to the WE# leading edge in read- 
write cycles. 

8. Operation within the t RAD(max) limit ensures that t RA Q( max ) can be met, t RAD ( max j is specified as a reference point only. If 
tRAD ,s greater than the specified t RA D( max ) limit, then the access time is controlled by t^. 

9. Refer to command definition tables for valid address and data values. 

10. Sampled, but not 100% tested. Guaranteed by design. 

1 1 . See AC Input/Output Reference Waveforms for timing measurements. 
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5.7 AC Character isticsf 11 ) 

V cc = 5.0V ± 0.5V, T a = 0°C to +70 °C 

Read, Write, Read-Modify-Write and Refresh Cycles (Common Parameters) 


Versions 

28F01 6XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

*RP 

RAS# precharge time 


10 


ns 

*cp 

CAS# precharge time 


15 


ns 

UsR 

Row address set-up time 

9 

0 


ns 

UaH 

Row address hold time 

9 

15 


ns 

Use 

Column address set-up time 

9 

0 


ns 

UaH 

Column address hold time 

9 

20 


ns 

Ur 

Column address hold time referenced to RAS# 

3,9 

35 


ns 

Uad 

RAS# to column address delay time 

8,9 

15 

15 

ns 

UrP 

CAS# to RAS# precharge time 


10 


ns 

UlED 

OE# to data delay 

10 

30 


ns 

UzO 

OE# delay time from data-in 

10 

0 


ns 

*dzc 

CAS# delay time from data-in 

10 

0 


ns 

»T 

Transition time (rise and fall) 

10 

2 

4 

ns 
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Read Cycle 


Versions 

28F016XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 


1 

Random read cycle time 


95 


ns 


RAS# pulse width (reads) 


85 

oo 

ns 


CAS# pulse width (reads) 


35 

CO 

ns 


RAS# to CAS# delay time (reads) 

1 

15 

50 

ns 


RAS# hold time (reads) 


30 


ns 


CAS# hold time (reads) 


85 


ns 

^RAC 

Access time from RAS# 

1,8 


85 

ns 

*CAC 

Access time from CAS# 

1,2 


35 

ns 

W 

Access time from column address 

8 


65 

ns 

^OEA 

OE# access time 



35 

ns 

^ROH 

RAS# hold time referenced to OE# 


35 


ns 

tRCS 

Read command setup time 


5 


ns 

^RCH 

Read command hold time referenced to CAS# 

6,10 

0 


ns 

^RRH 

Read command hold time referenced to RAS# 

6,10 

0 


ns 

^RAL 

Column address to RAS# lead time 

9 

15 


ns 

^CAL 

Column address to CAS# lead time 

9 

65 


ns 

m 

CAS# to output in Low-Z 

10 

0 


ns 

*OH 

Output data hold time 

10 

0 


ns 

^OHO 

Output data hold time from OE# 

10 

0 


ns 

^OFF 

Output buffer turn-off delay 

4,10 


30 

ns 

^OEZ 

Output buffer turn off delay time from OE# 

10 


30 

ns 

*CDD 

CAS# to data-in delay time 

10 

30 


ns 
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Write Cycle 



Read-Modify-Write Cycle 
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Fast Page Mode Cycle Continued 


Versions 

28F016XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

K8SI 

RAS# pulse width (reads) 


85 

CO 

ns 


RAS# pulse width (writes) 


65 

oo 

ns 


Access time from CAS# precharge 



70 

ns 

tcPW 

WE# delay time from CAS# precharge 

10 

0 


ns 


RAS# hold time from CAS# precharge (reads) 


65 


ns 

t CPRH(W) 

RAS# hold time from CAS# precharge (writes) 


65 


ns 


Fast Page Mode Read-Modify-Write Cycle 


Versions 

28F01 6XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

tpRWC 

Fast page mode read-modify-write cycle time 

10 

145 


ns 


Refresh Cycle 


Versions 

28F016XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 

tcSR 

CAS# set-up time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*CHR 

CAS# hold time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*WRP 

WE# setup time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*WRH 

WE# hold time (CAS#-before-RAS# refresh) 

10 

10 


ns 

*RPC 

RAS# precharge to CAS# hold time 

10 

10 


ns 

*RASS 

RAS# pulse width (self-refresh mode) 

10 

0 


ns 

*RPS 

RAS# precharge time (self-refresh mode) 

10 

10 


ns 

*CPN 

CAS# precharge time (self-refresh mode) 

10 

10 


ns 

tHS 

CAS# hold time (self-refresh mode) 

10 

0 


ns 



Refresh 


Versions 

28F016XD-85 

Units 

Sym 

Parameter 

Notes 

Min 

Max 


*REF 

Refresh period 

10 


oo 

ms 
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Misc. Specifications 


Versions 

28F016XD-85 

Units 

Parameter 

Notes 

Min 

Max 

RP# high to RAS# going low 

10 

300 


ns 

RP# set-up to WE# going low 

10 

300 


ns 

Vpp set-up to CAS# high at end of write cycle 

10 

100 


ns 

WE# high to RY/BY# going low 

10 


100 

ns 

RP# hold from valid status register data and RY/BY# high 

10 

0 


ns 

Vpp hold from valid status register data and RY/BY# high 

10 

0 


ns 


NOTES: 

1 . Operation within the tRCD(max) ,imit insures that t RA c( ma x) can be met. t R Q D ( max ) is specified as a reference point. 

2. Assumes that t RCD >t RCD(max) . 

3. t AR , t WCR) t DHR are referenced to t RAD(max ). 

4. t 0 FF(max) defines the time at which the output achieves the open circuit condition and is not referenced to V 0 h or V 0 |_- 

5. l WCS' ^RWD» ^CWD ar| d 1 awd are non restrictive operating parameters. They are included in the datasheet as electrical 
characteristics only. If twcs-twcsonin) the c y cle is an ear, y wr ' te c y c,e ap d the data output will remain high impedance for 
the duration of the cycle. If tQWD-tcWD(min)> t RWD- t RWD(min)> t AWD- t AWD(min)> then the cycle is a read-write cycle and the 
data output will contain the data read from the selected address. If neither of the above conditions are satisfied, the 
condition of the data out is indeterminate. 

6. Either t R Q|_| or t RRR must be satisfied for a read cycle. 

7. These parameters are referenced to the CAS# leading edge in early write cycles and to the WE# leading edge in read- 
write cycles. 

8. Operation within the t RAD (max) limit ensures that t RA Q( max ) can be met, t RA Q( max ) is specified as a reference point only. If 
tRAD ' s 9 reater than the specified t RA Q( max ) limit, then the access time is controlled by t^. 

9. Refer to command definition tables for valid address and data values. 

10. Sampled, but not 100% tested. Guaranteed by design. 

1 1 . See AC Input/Output Reference Waveforms for timing measurements. 
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0533-07 


Figure 7. AC Waveforms for Read Operations 
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RAS# 


CAS# 


Address 


WE# 


Din 



OPEN 


Dout 


OE# : Don't Care 
: Don't Care 


l WCS > *WCS (min) 052ajM 


Figure 8. AC Waveforms for Early Write Operations 
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Figure 9. AC Waveforms for Delayed Write Operations 
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Figure 10. AC Waveforms for Read-Modify-Write Operations 
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Figure 1 1. AC Waveforms for Fast Page Mode Read Operations 
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Figure 12. AC Waveforms for Fast Page Mode Early Write Operations 
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Figure 13. AC Waveforms for Fast Page Mode Delayed Write Operations 


192 


ADVANCE INFORMATION 






28F016XD FLASH MEMORY 


iny 



Figure 14. AC Waveforms for Fast Page Mode Read-Modify-Write Operations 
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Figure 15. AO Waveforms for RAS#-On!y Refresh Operations 
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RAS# 


CAS# 


WE# 


Address 


Dout 



OE#: Don't Care 
^ : Don't Care 

0533_16 


Figure 16. AC Waveforms for CAS#-before-RAS# Refresh Operations 
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Figure 17. AC Waveforms for Hidden Refresh Operations 
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Figure 18. AC Waveforms for Self-Refresh Operations 
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5.9 Power-Up and Reset Timings 



Sym 

Parameter 

Notes 

Min 

Max 

Unit 

BH 

RP# Low to V cc at 4.5V (Minimum) 

2 

0 


ps 

tpL3V 

RP# Low to V cc at 3.0V (Minimum) 

2 

0 


MS 

X 

CL 

3 

V cc at 4.5V Minimum) to RP# High 

1 

2 


MS 

Wph 

V cc at 3.0V (Minimum) to RP# High 

1 

2 


MS 


NOTES: 

For Read Timings following Reset, see sections 5.6 and 5.7. 

1 . The t 5VPH and/or t 3VPH times must be strictly followed to guarantee all other read and write specifications for the 28F016XD 

2. The power supply may start to switch concurrently with RP# going low. 
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5.10 Erase and Word Write Performance^* 4 ) 

V cc = 3.3V ± 0.3V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

Typd) 

Max 

Units 

WirhI 

Word Write Time 

2,5 

TBD 

35.0 

TBD 

ps 

Wirh 3 

Block Write Time 

2,5 

TBD 

1.2 

TBD 

sec 


Block Erase Time 

2,5 

TBD 

1.4 

TBD 

sec 


Erase Suspend Latency Time to Read 


1.0 

12.0 

75.0 

ps 


V cc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

WlRH 1 

Word Write Time 

2,5 

5 

9 

TBD 

ps 

twHRH 3 

Block Write Time 

2,5 

TBD 

0.3 

1.0 

sec 


Block Erase Time 

2 

0.3 

0.8 

10 

sec 


Erase Suspend Latency Time to Read 


1.0 

9.0 

55.0 

MS 


V cc = 5.0V ± 0.5V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypC) 

Max 

Units 

twHRH 1 

Word Write Time 

2,5 

TBD 

25.0 

TBD 

MS 

WlRH 3 

Block Write Time 

2,5 

TBD 

0.85 

TBD 

sec 


Block Erase Time 

2,5 

TBD 

1.0 

TBD 

sec 


Erase Suspend Latency Time to Read 


1.0 

9.0 

55.0 

Ms 


V cc = 5.0V ± 0.5V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Symbol 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

twHRH 1 

Word Write Time 

2,5 

4.5 

6 

TBD 

ps 

WlRH 3 

Block Write Time 

2,5 

TBD 

0.2 

1.0 

sec 


Block Erase Time 

2 

0.3 

0.6 

10 

sec 


Erase Suspend Latency Time to Read 


1.0 

7.0 

40.0 

MS 


NOTES: 

1 . 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Sampled, but not 100% tested. Guaranteed by design. 

5. The TBD information will be available in a technical paper. Please contact Intel’s Application Hotline or your local sales 
office for more information. 
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6.0 MECHANICAL SPECIFICATIONS 
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DEVICE NOMENCLATURE AND ORDERING INFORMATION 


^ Produc t line designator for all Intel Flash products 


e : 

1 8 F 

o 

■ a 

! 6> 

CD- 

■85 

^ 1 [ 

- 1 *i 

jy l-,_. 


Package 

E = TSOP 


Random Access Time 
(Irac) at 5V\fc c (ns) 


Device Density!! 

016= 16-Mbit J 


{ Device Type 

D = DRAM-Interface 


Product Family” 

X = Embedded 
Flash RAM . 


0533.21 


Order Code 

Valid Combinations 

Vcc = 3.3V ± 0.3V, 50 pF load, 
1.5V I/O Levels' 1 * 

Vcc = 5.0V ± 1 0%, 1 00 pF load, 
TTL I/O Levels' 1 * 

E28F016XD 85 

E28F016XD-95 

E28F016XD-85 


NOTE: 

1 . See Section 5.2 for T ransient Input/Output Reference Waveforms. 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tool 

297372 

16-Mbit Flash Product Family User’s Manual 

292152 

AB-58, "28F01 6XD-Based SIMM Designs" 

292165 

AB-62, "Compiling Optimized Code for Embedded Flash RAM Memories" 

292092 

AP-357, “Power Supply Solutions for Flash Memory” 

292123 

AP-374, "Flash Memory Write Protection Techniques" 

292126 

AP-377, "16-Mbit Flash Product Family Software Drivers, 
28F01 6SA/SV/XD/XS" 

292131 

AP-384, "Designing with the 28F01 6XD" 

292163 

AP-610, “Flash Memory In-System Code and Data Update Techniques” 

292168 

AP-614, “Using the 28F016XD in Embedded PC Designs” 

294016 

ER-33, “ETOX™ Flash Memory Technology — Insight to Intel’s Fourth 
Generation Process Innovation” 

297508 

FlashBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XD Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

Flash Cycling Utility 

Contact Intel/Distribution 
Sales Office 

28F016XD iBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XD VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F016XD Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XD Oread and ViewLogic Schematic Symbols 
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DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Removed support of the following features: 

° All page buffer operations (read, write, programming, Upload Device Information) 

• Command queuing 

• Software Sleep and Abort 

• Erase All Unlocked Blocks 

o Device Configuration command 

Changed definition of “NC.” Removed “No internal connection to die” from description. 

Added “xx” to Upper Byte of Command (Data) Definition in Sections 4.2 and 4.3. 

Modified parameters “V” and “1” of Section 5.1 to apply to “NC” pins. 

Increased Ipps (Vpp Read Current) for Vpp > Vcc to 200 pA at Vcc = 3.3V/5.0V. 

Changed Vcc = 5.0V DC Characteristics (Section 5.5) marked with Note 1 to indicate 
that these currents are specified for a CMOS rise/fall time (10% to 90%) of <5 ns 
and a TTL rise/fall time of <10 ns. 

Corrected “RP# high to RAS# going low” to be a “Min” specification at Vcc = 3.3V/5.0V. 

Increased Typical “Word/Block Write Times” (twHRHi/twHRH 3 ) for Vpp = 5.0V: 

twHRHi from 24.0 ps to 35.0 ps and twHRH 3 from 0.8 sec to 1 .2 sec at Vcc = 3.3V 
twHRHi from 16.0 ps to 25.0 ps and twHRH 3 from 0.6 sec to 0.85 sec at Vcc = 5.0V 

Changed ‘Time from Erase Suspend Command to WSM Ready” spec name to “Erase 
Suspend Latency Time to Read”; modified typical values and added Min/Max 
values at V C c =3.3/5.0V and V PP =5.0/1 2.0V (Section 5.10). 

Minor cosmetic changes throughout document. 
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1.0 INTRODUCTION 

This technical paper describes designs interfacing the 
high performance 28F016XS flash memory to the 
Intel486™ microprocessor. These designs are based on 
preliminary 28F016XS specifications. Please contact 
your Intel or distribution sales office for up-to-date 
information. 

The 28F016XS is a 16-Mbit flash memory with a 
synchronous pipelined read interface. This optimized 
flash memory interface delivers equivalent or better 
read performance compared to DRAM. The 28F016XS 
combines ROM-like non-volatility, DRAM-like read 
performance and in-system updateability into one 
memory technology. These inherent capabilities will 
improve performance and lower the over-all system 
cost. The 28F016XS delivers optimal performance 
when interfacing to a burst processor, such as the 
Intel486 microprocessor. The Intel486 microprocessor 
sees widespread use in a variety of applications ranging 
from the PC to numerous embedded products, while 
providing code compatibility with thousands of 
commercially available software packages and the 
performance necessary for today’s leading-edge 
systems. The Intel486 microprocessor’s bus interface 
provides a burst transfer mechanism whereby four 
consecutive data items are fetched in one access 
sequence. The 28F016XS’s synchronous pipelined read 
interface makes special use of the burst transfer 
mechanism to achieve extremely high read 
performance. 

When interfacing the 28F016XS to a processor that 
executes an Intel or linear burst cycle, up to three 
simultaneous read accesses can be pipelined into the 
28F016XS, sustaining a high read transfer rate. At 
33 MHz, the 28F016XS-15 delivers zero wait-state 


performance after the initial pipeline fill. This 
enhanced read performance eliminates the costly 
expense of shadowing code from slow non-volatile 
memory (ROM, hard disk drive, etc.) to fast DRAM for 
increased system performance. The 28F016XS enables 
direct code execution out of the flash memory array, 
eliminating unnecessary software and hardware 
overhead involved in shadowing code. 

In an Intel486 microprocessor-based environment, 
BAPCo benchmarking analysis revealed a 13 % system 
performance improvement using the 28F016XS-15 
over 70 ns DRAM. 

In addition to the increased read performance, the 
28F016XS offers an Intel486 microprocessor-based 
system a low power, non-volatile memory that is 
electrically updateable via local processor control. The 
28F016XS’s low power consumption reduces system 
power dissipation and heat emission, and its 
updateability increases code flexibility and system 
reliability. Combined, the 28F016XS and the Intel486 
microprocessor deliver a high performance, low power 
and cost-effective system solution. 

The Intel486 microprocessor interface to the 
28F016XS requires minimal logic while offering 
significant system enhancements. One programmable 
logic device (PLD), a 22V 10- 15, generates and 
monitors all 28F016XS and Intel486 microprocessor 
control signals. This technical paper explores the 
interface between the 28F016XS-15 and the Intel486™ 
SX-33 microprocessor, describing the interface 
circuitry, explaining the read and write cycles and 
providing the interfacing PLD equations. It also 
provides detailed design suggestions for interfacing the 
28F016XS to other Intel486 microprocessors. 
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2.0 OPTIMIZED 28F016XS/ INTEL486 SX MICROPROCESSOR INTERFACE 



with Wait-State Profile of 2-0-0-0 Up to 33 MHz 


The 28F016XS-15 interface to the Intel486 SX-33 
microprocessor, illustrated in Figure 1, delivers 2-0-0-0 
wait-state read performance. Consult your Intel or 
distribution sales office for schematic and PLD files for 
this design. 

See Section 3.0 for an alternative design. 


provides 4 Mbytes of flash memory for system usage. 
Signals A 2 i_ 4 f rom Intel486 SX microprocessor and 
CTRj.o from the PLD select locations within the 
28F016XS memory space, arranged as 1 Meg double 
words. The two-bit counter implemented in the PLD 
supplies consecutive burst addresses to the 28F016XSs. 

Reset 


2.1 Circuitry Description 

This section will describe the circuitry involved in this 
design. 

Memory Configuration 

This design uses two 28F016XS-15s, each configured in 
xl6 mode and arranged in parallel to match the Intel486 
SX microprocessor’s 32-bit data bus. This memory 
configuration 


The Intel486 SX microprocessor requires an active high 
reset signal, while the 28F016XSs use an active low 
RESET#. Figure 2 illustrates a suggested logic 
configuration for generating both an active high and low 
reset signal. The active high RESET controls the 
Intel486 SX microprocessor and PLD RESET inputs, 
while the active low RESET# drives the 28F016XS RP# 
input. 
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Figure 2. RESET Generation Method 


Chip Select Logic 

Chip select decode logic may use A 31 _ 22 to generate 
active low chip select signals, CE X #, for the 28F016XS 
memory space and other system peripherals. The chip 
select addressing the 28F016XS memory space drives 
CE 0 # on each 28F016XS-15 and a control input to the 
PLD. The 28F016XS-15s’ CEj# inputs are grounded. 

For many systems, using the upper address bits in a 
linear selection scheme may provide a sufficient number 
of chip select signals, thus eliminating chip select 
decode logic. (See Figure 3 for an example of using 
linear selection for chip selects.) When using a linear 
chip select scheme however, software must avoid using 
addresses that may select more than one device, which 
could result in bus contention. For example, addresses 
01000000H through 010FFFFFH drive both A 22 and A 23 
to a logic “0," which inadvertently selects two peripheral 
devices. 

CLK Option 

A 33 MHz CLK drives the Intel486 SX microprocessor. 

The buffer in Figure 1 delays this processor CLK input 
and drives the PLD and the 28F016XS-15s. The buffer 
introduces an intentional system clock skew. This skew 
provides additional time for the processor to meet the 
28F016XSs’ address setup time. 

Figure 3. Example of Using Linear Chip 
Selection with Active Low 
Chip Select Signals 
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Multiplexer (MUX) 

To achieve this type of wait-state profile, the Intel486 
SX microprocessor directly loads the 28F016XS with 
the address of the first read access. The interface logic 
enables the MUX to permit the processor’s lower 
address lines A 3-2 access to the lower flash memory 
address lines during the initial access of a burst or single 
read transaction. Next, the interface logic switches the 
data flow path through the MUX in anticipation of a 
burst transaction. The two-bit counter integrated into the 
control logic then takes over driving the 28F016XSs’ 
A 2 - 1 . The counter supplies the flash memory with 
consecutive burst addresses for the remaining duration 
of the transaction. 


Interface Control Signals 

The interfacing state machine monitors the Intel486 SX 
microprocessor’s external bus signals to control the two- 
bit counter and generate OE#, WE# and ADV# signals 
to the 28F016XS-15s. At the beginning of the burst 
cycle, the interface logic loads the two-bit counter. The 
state machine also generates KEN# and BRDY# signals, 
informing the Intel486 SX microprocessor of the nature 
of the bus cycle. 

Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal input to the state machine. The 
configuration signal must reset to logic “0” on power-up 
and system reset to ensure that the operation of the state 
machine matches the initial SFI Configuration of the 
28F016XS-15s. After optimizing the SFI Configuration, 
the GPIO must switch to logic “1” in order to take 
advantage of the optimized flash memory state. See 
Section 2.3 for more information regarding the 
configuration signal. 

Additional 28F016XS Control Signals 

The BYTE# input to the 28F016XS-15s is tied to 5.0V 
to configure the 28F016XS-15s for x 16 mode, and A 0 is 
tied to GND (A 0 is only used for byte addressing). A 
GPIO controls the write protect input, WP#, to the 
28F016XS-15s. The 28F016XS is compatible with 
either a 5.0V or a 12.0V V PP voltage and is completely 
protected from data alteration when V PP is switched to 
GND. With V PP < V PPLK , the 28F016XS will not 
successfully complete Data Write and Erase operations, 


inteh 

resulting in absolute flash memory data protection. 
Figure 1 also illustrates the 28F016XS-15’s RY/BY# 
output connecting directly to a system interrupt, which 
enables background Write/Erase operations. RY/BY#, 
WP#, and V PP implementations are application 
dependent. Consult the Additional Information section 
of this technical paper for documentation covering these 
topics in more detail. 

2.2 Interfacing Signal Definitions 

The interface logic that controls the 28F016XS-15 
interface to the Intel486™ SX-33 microprocessor 
monitors and regulates specific system signals. The next 
two sections describe these signals in detail. 

2.2.1 28F016XS Signal Descriptions 

This section describes the 28F016XS signals that are 
pertinent to this design. 

ADV# - Address Valid (Input) 

This active low signal informs the 28F016XS that a 
valid address is present on its address pins. ADV#, in 
conjunction with a rising CLK edge, initiates a read 
access to the 28F016XS. This signal is ignored during 
write operations. 

CLK - Clock (Input) 

CLK provides the fundamental timing and internal 
operating read frequency for the 28F016XS. CLK 
initiates read accesses (in conjunction with ADV#), 
times out the SFI Configuration, and synchronizes 
device outputs. CLK can be slowed or stopped with no 
loss of data synchronization. This signal, like ADV#, is 
ignored during write operations. 

OE# - Output Enable (Input) 

This active low signal activates the 28F016XS’s output 
buffers when OE# equals "0". The outputs tri-state when 
OE# is driven to "1". 

WE# - Write Enable (Input) 

This active low signal controls access to the Control 
User Interface (CUI). Addresses (command or array) and 
data are latched on the rising edge of WE# during write 
cycles. 
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2.2.2 INTEL486 SX Microprocessor Signal 
Descriptions 

This section describes the Intel486 SX microprocessor 
signals that are relevant to this interface. This interface 
assumes processor inputs are driven by only one 
controlling device (the PLD). If more than one device 
drives a processor input, the PLD output should be 
configured as open drain to avoid signal contention. 
Many PLDs, FPGAs and ASICs provide output 
configuration capability. 

ADS# - Address Status (Output) 

This active low output signal from the Intel486 SX 
microprocessor indicates the presence of valid bus cycle 
and address signals on the bus. ADS# is driven in the 
same clock as the address signals. Typically, external 
circuitry uses ADS# to indicate the beginning of a bus 
cycle. 

KEN# - Cache Enable (Input) 

This active low input to the Intel486 SX microprocessor 
determines whether data being returned in the current 
bus cycle will be cached. In order for the current data to 
be cached, KEN# must be returned active in the clock 
prior to the first RDY# or BRDY# of the cycle and must 
also be returned active in the last clock of the data 
transfer. 

BRDY# - Burst Ready (Input) 

This active low input to the microprocessor performs the 
same function during a burst cycle as RDY# performs 
during a non-burst cycle. During a burst cycle, BRDY# 
is sampled on the rising edge of every clock. Upon 
sampling BRDY# active, the data on the data bus will be 
latched into the microprocessor (for burst reads). ADS# 
will be negated during the second transfer of the burst 
cycle; however, the lower address lines and byte enables 
may change to indicate the next data item requested by 
the processor. 

BLAST# - Burst Last (Output) 

This active low output from the microprocessor signals 
the final transfer in a burst cycle. The next time BRDY# 
is returned, it will be treated the same as RDY# and thus 
terminate any multiple cycle transfers. 


2.3 System Interface Requirement 

The system logic controlling the 28F016XS-15 interface 
to the Intel486 SX microprocessor incorporates an initial 
and an optimized read configuration, which correlates to 
specific SFI Configuration values. The interface read 
configuration is dependent upon the value of CFG (PLD 
input). CFG informs the interface of the SFI 
Configuration status. Note, the SFI Configuration status 
does not affect Write operations. 

Initial Read Configuration 

Upon power-up/reset, the 28F016XS-15 defaults to a 
SFI Configuration value of 4, and the interface logic 
supports burst read accesses to the flash memory space. 
The interface returns BRDY# to inform the processor 
that the interface supports burst read transaction. A 
general purpose input/output (GPIO) informs the system 
interface of the status of the SFI Configuration. 

The GPIO entitled CFG is set to logic “0” on 
power-up/reset. With CFG driven low, the state machine 
correctly matches the 28F016XS-15s’ default 
configuration. 

Optimized Read Configuration 

At 33 MHz, the 28F016XS-15 operates at highest 
performance with a SFI Configuration value set to 2. To 
reconfigure the 28F016XS-15, program control should 
jump to an area of RAM to execute the configuration 
sequence. After reconfiguring the 28F016XS-15, the 
GPIO value must change to logic “1,” in order to take 
advantage of the 28F016XS-15’s optimized 
configuration. A pseudocode flow for this configuration 
sequence is shown below. 

Execute Device Configuration command sequence 

Activate CFG signal 

End 

In the optimized read configuration, the system logic 
supports burst cycles by generating BRDY#, which 
informs the microprocessor that the memory subsystem 
is capable of handling a burst transfer. The 
28F016XS-15 memory array, after the initial pipeline fill 
delay from the first access, transfers data to the 
processor at a rate of 133 Mbytes/sec. 


PRODUCT PREVIEW 


211 



28F01 6XS/lntel486 CPU Interface 


iny 


2.4 Read Control for Burst 
Transactions 

The interface logic controlling the handshaking between 
the 28F016XS and processor performs one of two 
different read cycles, depending upon the CFG input 
signal. 

Read Abort Condition 

A read cycle will abort only when an external system 
bus master asserts BOFF#, which forces the processor to 
give immediate bus control to the requester. When this 
situation occurs, the Intel486 SX microprocessor floats 
the address bus, which will cause the address decode 
logic to de-select the 28F016XS memory space. 
Monitoring BOFF#, the interfacing logic will transition 
to an idle state and wait for the processor to re-initiate 
the interrupted bus cycle after the bus master has 
relinquished the bus to the processor. OE# is 
immediately driven high, deactivating the 28F016XS- 
15’ s output buffers, upon detecting BOFF# driven 
active. This BOFF# condition can occur in both the 
initial and optimized configurations described in the 
paragraphs that follow. 

Initial Configuration 

Refer to Figures 4 and 5 for the following read cycle 
discussion. 

With CFG set to logic “0,” the interfacing read state 
machine executes cacheable burst read cycles. This 
configuration occurs upon power-up and reset. 

Initially, the interface logic drives ADV# and MUX 
active while waiting for the Intel486 SX processor to 
initiate a bus cycle targeting the 28F016XS. With the 
MUX active, the processor’s A 3-2 drive the lower flash 
memory address lines in anticipation of a flash memory 
access. During this anticipation state, CE# is active to 
prevent a tELCH violation on the first access initiated by 
the processor. The delayed CLK also prevents a possible 
timing violation, providing the processor with sufficient 
time to meet the 28F016XSs’ tAVCH specification when 
initiating the first access. 


When the microprocessor does initiate a read access to 
the 28F016XS memory space, it will provide an address, 
drive W/R# low and activate ADS#. Monitoring these 
signals, the state machine transitions into read control. 

If ADS# = 0 and W/R# = 0 then READ CONTROL 

At this point, CFG and CS# are examined to determine 
the configuration status of the 28F016XS-15s, and 
whether or not the current address targets the 28F016XS 
memory space. If CS# = “1,” the state machine returns 
to an idle state waiting for a new access. Otherwise, the 
state machine will continue the read access, regulating 
ADV#, BRDY# and OE#. 

At N = 1 (Figure 5), the interfacing read state machine 
loads and increments the two-bit counter. The counter is 
incremented because the processor supplies the flash 
memory with the initial address. The counter then 
provides the flash memory with the subsequent burst 
addresses throughout the remaining duration of the bus 
transaction. 

With ADV# at logic "0," the interface initiates a read 
access to the 28F016XS-15s at N = 1. Next, ADV# 
immediately switches to a logic “1” at N = 1 and then 
toggles active on every other clock edge until N = 8. 
After this time, ADV# will remain inactive. 

In the default SFI Configuration (SFI Configuration 
= 4), the first data will be accessible to the processor at 
N = 6. The rest remaining data will be available for the 
processor to retrieve at N = 8, 10 and 12. The 
28F016XS-15’s output buffers are enabled at N = 3 and 
BRDY# is driven low at N = 5. The processor will 
sample BRDY# active and latch the information residing 
on the data bus at N = 6. If the processor drives 
BLAST# inactive, indicating a burst transaction is in 
process, the interface logic will drive BRDY# active on 
every other clock edge until BLAST# is sampled active 
by the interface logic. Then the state machine will 
transition to an idle state where it deactivates OE# and 
waits for the processor to initiate a new bus cycle. 
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Initial Configuration Timing Consideration 

In this initial read configuration design, there are 
important timing considerations that need to be taken 
into consideration. 

First, the buffer delay can cause possible timing 
violations if not chosen correctly. The purpose of the 
buffer is to provide time for the processor to load the 
28F016XSs with the initial address during read 
transactions. Therefore, the buffer must have a minimum 
delay which satisfies the flash memory’s’ tAvcH- 

tAVCH + 16 - 1/33 MHz = 1 ns 


The buffer can also affect the processor’s data setup 
time. Hence, the buffer must have a maximum delay of 
no greater than: 

1/33 MHz - tcHQv -\i 2 — 5 ns 

Another important timing parameter is the Intel486 SX 
microprocessor’s data hold time. Since the 28F016XS 
specifies a 0 ns guaranteed data hold time from CE# or 
OE# high, these two signals must be driven active until 
the processor’s hold time is satisfied. CE# hold delay 
will not be concern because CE# is held active during 
the state machine’s idle state. OE# has only .5 ns of 
margin to the processor’s specification for the buffer 
used in this design. OE# hold time equals: 

tpzX(min) + tpHL(min) = 3.5 ns 


Consult the appropriate datasheets for full timing 
information. 



BLAST#=0 
+ CS# =0 
+ BOFF#=0 


Figure 4. Optimized Read State Diagram for Burst Read Control (Interface Shown in Figure 1) 
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Figure 5. Example Initial Burst Read Cycle Showing Key Timing 
Specifications Requiring Consideration 


Table 1. Example Optimized Read Cycle Specifications at 5V V cc 


Symbol 

Description 

Min 

Max 

Unit 

tpHL.PLH 

Buffer Delay 

1.5 

5 

ns 

*6 

ADS# Delay (Intel486 SX-33 microprocessor) 

3 

16 

ns 

*8a 

BLAST# Delay (Intel486 SX-33 microprocessor) 

3 

20 

ns 

*22 

D 31 _o Setup Time (Intel486 SX-33 microprocessor) 

5 


ns 

*ELCH 

CE X # Setup Time to CLK (28F01 6XS-1 5) 

25 


ns 

*VLCH 

ADV# Setup Time to CLK (28F016XS-15) 

15 


ns 

*GLCH 

OE# Setup Time to CLK (28F016XS-15) 

15 


ns 

*CHQV 

CLK to Data Delay (28F016XS-15) 


20 

ns 

*PZX 

CLK Output Delay (22V1 0-1 5) 

2 

8 

ns 


NOTE; 

Consult appropriate datasheets for up-to-date,specifications. 
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Optimized Configuration 

Refer to Figures 4 and 6 for the following discussion. 

With the 28F016XS-15s in the optimized configuration 
(SFI Configuration = 2 at 33 MHz), and CFG set to a 
logic “1” value, the system interface executes cacheable 
burst cycles. 

Like the initial configuration, the connecting logic 
initially drives ADV# and MUX active while waiting for 
the Intel486 SX processor to initiate a bus cycle 
targeting the 28F016XS. With the MUX active, the 
processor’s A 3-2 drive the lower flash memory address 
lines in anticipation of a flash memory access. During 
this anticipation state, CE# is active to prevent a tcLCH 
violation on the first access initiated by the processor. 
The delayed CLK also inhibits also possible timing 
violations from occurring. It provides the processor with 
sufficient time to meet the 28F016XSs’ tAVCH 
specification when initiating the first access. 

When the processor drives ADS# low, it notifies the 
interface logic that a valid address is on the address bus. 
Monitoring the external bus of the Intel486 SX 
microprocessor, the state machine then transitions into 
read control. 

If ADS# = 0 and W/R# = 0 then READ CONTROL 

In optimized read control, the state machine controls 
OE#, KEN# and BRDY#. If CS# = “0,” the state 
machine at N = 1 loads and increments the two-bit 
counter, switches the data flow path through the MUX 
and holds ADV# active for the next three consecutive 
clock periods. While ADV# is driven low, the counter 
increments through the Intel burst order (Table 2), 
supplying the 28F016XS-15s with a new address at 
N = 2, 3 and 4. If CS# =" 1 the state machine returns to 
an idle state waiting for a new memory access. 


Table 2. Intel Burst Order (A 3 . 2 ) 


First 

Address 

Second 

Address 

Third 

Address 

Fourth 

Address 

0 

4 

8 

C 

4 

0 

C 

8 

8 

C 

0 

4 

C 

8 

4 

0 


At N = 2, the state machine drives KEN# active and 
holds it active until the end of the burst cycle, thereby 
executing a cache line fill. 

The state machine activates the 28F016XS-15 output 
buffers (OE# driven to a logic “0” value) at N = 2 and 
holds them active throughout the burst read cycle. 

With the SFI Configuration value set to 2, data will be 
available at N = 4, 5, 6 and 7. Driving BRDY# low at N 
= 3, the Intel486 SX microprocessor will sample 
BRDY# active at N = 4, which informs the processor of 
valid information on data pins D 31 . 0 and that the 
28F016XS memory space supports a burst read transfer. 
BRDY# is held low until the end of the burst cycle while 
the processor retrieves data on every rising clock edge. 
BRDY# is driven high upon sampling BLAST# low, 
marking the end of the burst cycle. Then the state 
machine will transition to and idle state where it 
deactivates OE# and waits for the processor to initiate a 
new bus cycle. 

Optimized Configuration Timing Considerations 

In the optimized configuration, the same timing 
consideration regarding the buffer propagation delay and 
OE# hold time require attention. For information 
regarding these concerns, see Section 2.4 Initial 
Configuration Timing Considerations. 
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Figure 6. Example Burst Read Timing Waveform Illustrating Key Timing 
Specifications Requiring Consideration 


Table 3. Example Optimized Read Cycle Specifications at 5V V cc 


Symbol 

Description 

Min 

Max 

Unit 

tpHL,PLH 

Buffer Delay 

1.5 

5 

ns 

*6 

ADS# Delay (Intel486 SX-33 microprocessor) 

3 

16 

ns 

*8a 

BLAST# Delay (Intel486 SX-33 microprocessor) 

3 

20 

ns 

*22 

D 3 i_ 0 Setup Time (Intel486 SX-33 microprocessor) 

5 


ns 

*ELCH 

CE X # Setup Time to CLK (28F016XS-15) 

25 


ns 

*VLCH 

ADV# Setup Time to CLK (28F016XS-15) 

15 


ns 

*GLCH 

OE# Setup Time to CLK (28F016XS-15) 

15 


ns 

*CHQV 

CLK to Data Delay (28F016XS-15) 


20 

ns 

*PZX 

CLK Output Delay (22V10-15) 

2 

8 

ns 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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2.5 Write Cycle Control 

Refer to Figures 7 and 8 for the following write cycle 
discussion. 

Write Abort Condition 

A write cycle will abort only when an external system 
bus master asserts BOFF#, which forces the processor to 
give immediate bus control to the requester. When this 
situation occurs, the Intel486 SX microprocessor will 
float the address bus, causing the address decode logic 
to de-select the 28F016XS memory space. The 
interfacing logic, monitoring BOFF#, will transition to 
an idle state where it will wait for the processor to re- 
initiate the interrupted bus cycle after the bus master has 
relinquished the bus to the processor. WE# is 
immediately deactivated upon sensing BOFF# low. 



Figure 7. Non-Burst Write State Diagram 
Controlling the Interface Shown in Figure 1 


Write Cycle Description 

The 28F016XS-15 executes asynchronous write cycles 
like traditional flash memory components such as the 
28F016SA/SV. The SFI Configuration does not 


influence write operations; therefore, the interfacing 
state machine does not examine CFG once detecting a 
write cycle. 

During the first clock period, the Intel486 SX 
microprocessor drives ADS# low and W/R# high. The 
state machine, upon detecting a write cycle, immediately 
switches the data flow path through the MUX. The 
processor does not drive the flash memory’s lower 
address lines during write cycles. The counter loads and 
supplies the address to the 28F016XSs’ lower two 
address lines, A 2 - 1 . The state machine then transitions to 
write control at N =1. The counter only supplies the 
28F016XS-15 with one address throughout the entire 
write operation. A write transaction must complete fully 
before issuing a second write operation. 

If ADS# = 0 and W/R # = 1 then WRITE CONTROL 

In write control, the state machine performs 
WE# -controlled command write operations to the 
28F016XS-15s. Data is written to the 28F016XS 
memory space via processor control. The interface only 
supports double word writes. 

For the next two clock periods the state machine holds 
WE# low to satisfy the 28F016XS-15s’ WE# active 
requirement. At N = 4, WE# transitions to a logic “1,” 
which latches the address and data into the 
28F016XS-15s. 

BRDY# is not returned to the processor at N = 4 because 
the Intel486 SX microprocessor will only hold an 
address 3 ns after sampling BRDY# low. Instead, the 
interface activates BRDY# after N = 4, causing the 
processor to hold the address valid for an additional 
clock cycle, which satisfies the 28F016XS-15’s address 
hold specification (t WHAX )- The state machine then 
returns to an inactive state at N = 5, waiting for a new 
memory access. 

Write Timing Consideration 

When performing a write operation, CS# is a critical 
system timing parameter, which must satisfy the 
interface logic’s required setup time. The 22V 10- 15 
requires a 9 ns setup time to CLK. Therefore, the system 
decode logic must generate a valid CS# to the interface 
within: 

2 x 1/33 MHz - 1 6 - t su = 35 ns 

Consult the appropriate datasheets for full timing 
information. 
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Table 4. Example Write Cycle Timing Specifications at 5V Vcc 


Symbol 

Description 

Min 

Max 

Unit 

k 

ADS# Delay(lntel486 SX-33 microprocessor) 

3 

16 

ns 

*10 

Data Write Valid Delay (Intel486 SX-33 
microprocessor) 

3 

18 

ns 

tn 

Data Write Float Delay (Intel486 SX-33 
microprocessor) 


20 

ns 

*WLWH 

WE# Pulse Width (28F01 6XS-1 5) 


50 

ns 

*DVWH 

Data Setup to WE# Going High (28F016XS-15) 


50 

ns 

tpzx 

CLK Output Delay (22V10-15) 

2 

8 

ns 


NOTE: 


Consult appropriate datasheets for up-to-date specifications. 
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3.0 STANDARD 28F016XS / INTEL486 SX MICROPROCESSOR INTERFACE 



Switched 
5V or 12V 

5V 

GPIO 

INT 


7504_01 


Figure 9. Minimal Glue Logic in Interfacing the 28F016XS-15 to the Intel486 SX-33 Microprocessor 
with a Wait-State Profile of 3-0-0-0 Up to 33 MHz 


The 28F016XS-15 interface to the Intel486 SX-33 
microprocessor illustrated in Figures 1 delivers 3 -0-0-0 
wait-state read performance. The design requires only 
one 22V10 to handle all interfacing requirements. 
Consult your Intel or distribution sales office for 
schematic and PLD equations for the interface 
documented in this section. 

See Section 2.0 for an alternative design. 

3.1 Interface Circuitry Description 

This interface is extremely similar to the optimized 
design described in Section 2. The circuitry elements 
involved in the design are exactly the same except to for 
the elimination of the buffer and multiplexer in this 
interface. For specific circuitry information about the 
individual aspects of this design, refer to Section 2. 


CLK Option 

Unlike the optimized 28F016XS/Intel486 SX 
microprocessor interface, a buffer is not implemented in 
this design. The processor’s 33 MHz CLK input drives 
both the PLD and flash memory. To reduce system clock 
skew, position the PLD and 28F016XSs within close 
proximity to the microprocessor. 

3.2 Read Control For Burst 
Transactions 

Similar to the optimized design described in Section 2, 
the read state machine will perform one of two different 
read cycles, depending upon the CFG input value. This 
section will concentrate on the differences between the 
read operations between the optimized and standard 
interface. 


Initial Configuration 

Refer to Figures 10 and 11 for the following read cycle 
discussion. 
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With CFG set to logic “0,” the interfacing read state 
machine executes cacheable burst read cycles. This 
configuration will occur upon power-up and reset. 

The microprocessor initiates a read access to the 
28F016XS memory space by providing an address, 
driving W/R# low and activating ADS#. Monitoring the 
external bus of the Intel486 SX microprocessor, the state 
machine transitions into read control. 

If ADS# = 0 and W/R # = 0 then READ CONTROL 

At this point, CFG and CE# are examined to determine 
the configuration status of the 28F016XS-15s, and 
whether or not the current address targets the 28F016XS 
memory space. If CE# = “1,” the state machine returns 
to an idle state waiting for a new access. Otherwise, the 
state machine will continue read access. In the initial 
configuration (CFG = “0”), read control will regulate 
ADV#, BRDY# and OE#. 

At N = 1 (Figure 5), the counter loads address bits A 3 . 2 
and transitions ADV# low. With ADV# at logic "0," the 
interface initiates a read access to the 28F016XS-15s at 
N = 2. After initiating the read access, ADV# 
immediately switches to a logic “1” at N = 2 and then 
toggles active on every other clock edge until N = 8. 
After which, ADV# will remain inactive. 

In the default SFI Configuration (SFI Configuration 
= 4), the first data will be accessible to the processor at 
N = 7. The rest of the data will be available for the 
processor to retrieve at N = 9, 11 and 13. The 
28F016XS-15’s output buffers are enabled at N = 4 and 


BRDY# is driven low at N = 6. The processor will 
sample BRDY# active and latch the information residing 
on the data bus at N = 7. If the processor drives 
BLAST# inactive indicating a burst transaction is in 
process, the interface logic will drive BRDY# active on 
every other clock edge until BLAST# is sampled active 
by the interface logic. 

The Intel486 SX microprocessor requires a 3 ns hold 
time after sampling BRDY# active, therefore, the state 
machine will hold OE# active for 15 ns after the 
processor reads the last double-word. Then, the state 
machine will transition to an idle state where it 
deactivates OE# and waits for the Intel486 SX 
microprocessor to initiate a new bus cycle targeting the 
28F016XS memory space. 

Initial Configuration Timing Consideration 

In the initial read configuration, CE# setup is a key 
system timing parameter. 

To satisfy the 28F016XS-15 setup requirement, CE# 
must be valid 25 ns prior to the first rising CLK edge 
with ADV# = “0.” Therefore, the maximum time 
allotted for the address decoding logic to generate CE# 
equals: 

2*1/33 MHz - 1^ - tpy fpf = 19 ns 

Consult the appropriate datasheets for full timing 
information. 
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BLAST#=0 
+ BOFF#=0 


7504_10 


Figure 10. State Diagram of Single and Burst Read Control 
(Interface Shown in Figure 1) 
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Figure 11. Example Initial Burst Read Cycle Showing Key Timing Specifications 
Requiring Consideration 


Symbol 



Table 5. Example Initial Read Cycle Timing Specifications at 5V Vcc 


Description 


ADS# Delay (Intel486 SX-33 microprocessor) 


RDY# Setup Time (Intel486 SX-33 microprocessor) 


D 31 _ 0 Setup Time (Intel486 SX-33 microprocessor) 


CE X # Setup Time to CLK (28F016XS-15) 


ADV# Setup Time to CLK (28F016XS-15) 


OE# Setup Time to CLK (28F016XS-15) 


CLK to Data Delay (28F016XS-15) 


CLK Output Delay (22V10-15) 



Consult appropriate datasheets for up-to-date specifications. 
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Optimized Configuration 

Refer to Figures 10 and 12 for the following discussion. 

With the 28F016XS-15s in the optimized configuration 
(SFI Configuration = 2 at 33 MHz), and CFG set to a 
logic “1” value, the system interface executes cacheable 
burst cycles. 

The Intel486 SX processor drives ADS# low, notifying 
the interface logic that a valid address is on the address 
bus. Monitoring the external bus of the Intel486 SX 
microprocessor, the state machine then transitions into 
read control. 

If ADS# = 0 and W/R# = 0 then READ CONTROL 

In optimized read control, the state machine controls 
OE#, KEN# and BRDY#. If CE# = “0,” the state 
machine at N = 1 loads the two-bit counter (A 3 . 2 ) and 
activates ADV# (ADV# = “0”) for the next four 
consecutive clock periods (N = 1 through 5). While 
ADV# is driven low, the counter increments through the 
Intel burst order (Table 2), supplying the 28F016XS-15s 
with a new address at N = 2, 3, 4 and 5. If CE# ='T,” the 
state machine returns to an idle state waiting for a new 
memory access. 
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With the SFI Configuration value set to 2, new data will 
be available at N = 5, 6, 7 and 8. Driving BRDY# low at 
N = 4, the Intel486 SX microprocessor will sample 
BRDY# active at N = 5, which informs the processor of 
valid information on data pins D 31 . 0 and that the 
28F016XS memory space supports a burst read transfer. 
BRDY# is held low until the end of the burst cycle while 
the processor retrieves data on every rising clock edge. 
BRDY# is driven high upon sampling BLAST# low, 
marking the end of the burst cycle. 

The Intel486 SX microprocessor requires a 3 ns hold 
time after sampling the last BRDY# active in a burst 
cycle. Therefore, the state machine will hold OE# active 
for 15 ns after the microprocessor samples the last 
double-word. At N = 9, the state machine transitions to 
an idle state, where it deactivates OE# and waits for the 
Intel486 SX microprocessor to initiate a new bus cycle 
targeting the 28F016XS memory space. 

Optimized Configuration Timing Considerations 

In the optimized configuration, CE# setup time is again 
a key system timing parameter. For information 
regarding the CE# setup time requirement, see the Initial 
Configuration Timing Considerations Timing section. 
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Figure 12. Example Burst Read Cycle Showing Key Timing Specifications Requiring Consideration 


Table 6. Example Optimized Read Cycle Specifications at 5V V cc 


Symbol 

Description 

Min 

Max 

Unit 

*6 

ADS# Delay (Intel486 SX-33 microprocessor) 

3 

16 

ns 


BLAST# Delay (Intel486 SX-33 microprocessor) 

3 

20 

ns 

*22 

D 31 _ 0 Setup Time (Intel486 SX-33 microprocessor) 

5 


ns 

*ELCH 

CE X # Setup Time to CLK (28F016XS-15) 

25 


ns 

*VLCH 

ADV# Setup Time to CLK (28F016XS-15) 

15 


ns 

*GLCH 

OE# Setup Time to CLK (28F016XS-15) 

15 


ns 

*CHQV 

CLK to Data Delay (28F016XS-15) 


20 

ns 

*PZX 

CLK Output Delay (22V1 0-1 5) 

2 

8 

ns 


NOTE: 


Consult appropriate datasheets for up-to-date specifications. 
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3.3 Write Cycle Control 

The write interface in for this design functionally 
behaves like the optimized design’s write interface. The 
only difference between the two designs is the absence 
of the MUX in the standard interface. Therefore, the 
interface logic for this design does not have to concern 
itself with changing the data flow through the MUX. 
Instead, the interface simply loads and holds the address 
for the duration of the write operation. 

For further detailed information about this cycle and 
write timing waveform, refer to Section 2.4. 


4.0 INTERFACING TO OTHER 

INTEL486 MICROPROCESSORS 

The Intel486 microprocessor family provides designers a 
large and diverse selection of CPUs, which offers 
designers different performance points to meet different 
market segment needs. Throughout the product family, 
the external bus architecture has remained consistent, 
which makes the 28F016XS interface to the entire 
Intel486 microprocessor family similar, if not identical, 
to the Intel486 SX microprocessor interface described in 
Sections 2 and 3. The 28F016XS-15 interface to the 
Intel486 SX-33 microprocessor works equally well for 
the following microprocessors at 5.0V V cc . 

• Intel486™ SX-20, 25 processors 

• Intel486™ SX2-50 processor 

• Intel486™ DX-25, 33 processors 

® Intel486™ DX2-40, 50, 66 processors 

• IntelDX4™-75, 100 processors(I/0 buffers 
configured for 5.0V, V CC5 = 5.0V) 

The 28F016XS-15 interface to the Intel486 SX-33 
microprocessor also works well for the following 
Intel486 microprocessors at 3.3V V cc . The 3.3V V cc 
design utilizes a 22V 10- 15 low voltage PLD to control 
the interface between the 28F016XS-15 (operating at 
3.3V V cc ) and the processor. 

• Intel486 SX-20, 25 processors 

• Intel486 DX-25 processor 

• Intel486 DX2-40, 50 processors 

• IntelDX4-75 processors 

(I/O buffers configured for 3.3V, V CC5 = 3.3V) 

When the external bus frequency falls outside the 
16.7 MHz through 33 MHz frequency range at 5.0V V cc 
(12.5 MHz through 25 MHz at 3.3V V cc ), the optimized 


SFI Configuration value for the 28F016XS-15 differs in 
respect to the Intel486 SX-33 microprocessor design 
documented earlier. The state machine, therefore, 
requires slight modifications to accommodate the 
different SFI Configuration. Note, the initial read 
configuration and write control state machine remains 
consistent throughout all designs because they are not 
affected by the optimized SFI Configuration. 

Intel486 SX-16 Microprocessor Interface at 
5.0V V cc 

The 28F016XS-15’s optimized SFI Configuration at 
16 MHz equals 1. Therefore, 28F016XS-15 will begin 
driving data one CLK period after initiating the first read 
access. The optimized state machine must drive BRDY# 
and OE# active upon initiating the first access to the 
28F016XS-15. BRDY# and OE# remain low throughout 
the burst cycle. The optimized and standard 
28F016XS-15 interface to the Intel486 SX-16 
microprocessor at this specific frequency deliver 1 -0-0-0 
and 2-0-0-0 wait-state read performance respectively. 

Intel486 DX-50 Microprocessor Interface at 
5V V cc 

Operating at 50 MHz, the 28F016XS-15’s optimized SFI 
Configuration equals 3. The interface loads the two-bit 
counter and drives ADV# active at the first rising CLK 
edge after the processor initiates the read access. The 
optimized read state machine increments the two-bit 
counter and drives ADV# low every other CLK, thereby 
adhering to the Alternating- A ^ and Same-Aj access rules 
(see Additional Information). The optimized and 
standard 28F016XS-15 interface to the Intel486 DX-50 
microprocessor at this given frequency deliver 4- 1-1-1 
and 5- 1-1-1 wait-state read performance respectively. 

Intel486 DX-33 and lntelDX4-100 Microprocessor 
Interface at 3.3V V C c 

Operating at 33 MHz with 3.3 V V cc , the 
28F016XS-15’s optimized SFI Configuration equals 3. 
The interface loads the two-bit counter and drives ADV# 
active at the first rising CLK edge after the processor 
initiates the read access. The optimized read state 
machine increments the two-bit counter and drives 
ADV# low for two CLK periods and then strobes ADV# 
high for one CLK period. ADV# is again driven low for 
two CLK periods finishing the burst cycle. Refer to the 
Altemating-A j and Same-Aj access rules (see 
Additional Information) for further information on 
consecutive accesses. The optimized and standard 
28F016XS-15 interface to the Intel486 microprocessor 
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at this frequency deliver 3-0- 1-0 and 4-0- 1-0 wait-state 
read performance respectively. 

5.0 CONCLUSION 

This technical paper has described the interface between 
the 28F016XS 16-Mbit flash memory component and 
the Intel486 microprocessor. This simple design has 
been implemented with a minimal number of 
components and achieves exceptional read 


performance. The 28F016XS provides the 
microprocessor with the non-volatility and updateability 
of flash memory and the performance of DRAM. For 
further information about 28F016XS-15, consult 
reference documentation for a more comprehensive 
understanding of device capabilities and design 
techniques. Please contact your local Intel or distribution 
sales office for more information on Intel’s flash 
memory products. 
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ADDITIONAL INFORMATION 


Order Number 

Document/Tools 

290532 

28F016XS Datasheet 

297500 

"Interfacing the 28F016XS to the i960® Microprocessor 
Family" 

292147 

AP-398, "Designing with the 28F016XS" 

292146 

AP-600, "Performance Benefits and Power/Energy Savings of 
28F016XS Based System Designs" 

292163 

AP-610, “Flash Memory In-System Code and Data Update Techniques” 

292165 

AB-62, “Compiled Code Optimizations For Embedded Flash RAM 
Memories” 

297372 

16-Mbit Flash Product User's Manual, 

297508 

FLASHBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS IBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XS VHDL/Verilog Models 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F016XS Oread and ViewLogic Schematic Symbols 



REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Incorporated initial read burst configuration, replacing the single read cycle 
Added optimized design, improving system read performance 
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APPENDIX A 
PLD FILE FOR THE 28F016XS 
INTEL486 MICROPROCESSOR 
INTERFACE 

PLD file for the optimized interface described in Section 2. 


TITLE 

Optimized 28F016XS / 486 Interface 

PATTERN 

PDS 

REVISION 

1 

AUTHOR 

Example 

COMPANY NAME 

Intel 

DATE 

2/6/95 

CHIP OPTIMIZED_28FO 1 6XS_486_INTERFACE 85C22V10 

; input pins 

PIN 1 CLK 

; elk frequency 33mhz 

PIN ADS 

; address strobe from 486 

PIN WR 

; multiplexed read/write strobe 

PIN BLAST 

; BLAST from the 486 

PIN CE 

; CE from the address decoding logic 

PIN CFG 

; informs interface to changes to the SFI Configuration 

PIN A2 

; lower address lines from the 486 used 

PIN A3 

; in loading the counter 

PIN RESET 

; system reset 

PIN 25 GLOBAL 
; output pins 
PIN ADV 

; address valid input 

PIN /KEN 

; cache control 

PIN /OE 

; output enable input 

PIN /WE 

; write enable input 

PIN /BRDY 

; initiating a burst cycle, 486 input 

PIN SWITCH 

; control MUX switching 

PIN QO 

; state variable 

PIN CTRO 

; lower bit of the 2bit counter 

PIN CTR1 

; higher bit of the 2bit counter 

STRING LD '(/ADS)’ 

; load 

STRING INC '(/ADV)' 

; increment 

STATE MOORE MACHINE 

DEFAULT_BRANCH SO 

; state assignments 

SO = /ADV* /BRDY* 

/OE * /WE * /KEN * /SWITCH * /QO 

SI = /ADV* /BRDY* 

/OE * /WE * /KEN * SWITCH * /QO 

S2 = /ADV* /BRDY* 

OE * /WE * KEN * SWITCH * /QO 

S3 = /ADV * BRDY* 

OE * /WE * KEN * SWITCH * /QO 

S4 = ADV * BRDY * 

OE * /WE * KEN * SWITCH * /QO 

S5 = ADV * /BRDY * 

OE * /WE * KEN * SWITCH * /QO 
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PLD file for the standard interface described in Section 3. 



Title Standard 28F016XS / Intel486™ Interface 

Pattern PDS 

Revision 1 

Author Example 

Company Name Intel 

Date 2/14/94 

CHIP 28F0 1 6XS_486 ..Interface 85C22V10 ; 85C22V10-15 

; input pins 
PIN 1 CLK 
PIN ADS 
PIN WR 
PIN BLAST 

PIN CE 
PIN CFG 
PIN BOFF 
PIN A2 
PIN A3 
PIN RESET 

PIN 25 GLOBAL 
;output pins 
PIN /ADV 
PIN /KEN 
PIN /OE 
PIN /WE 
PIN /BRDY 
PIN QO 
PIN Q1 
PIN CONTO 
PIN CONTI 

STRING LD '(/ADS )' 

STRING INC '(/AD V)' 

STATE MOORE_MACHINE 
DEFAULT_BRANCH SO 
; state assignments 

50 = /ADV * /KEN * /WE * /BRDY * /QO * /Q1 

51 = ADV * /KEN * /WE * /BRDY * /QO * /Q1 

52 = ADV * KEN * /WE * /BRDY * /QO * /Q1 

53 = ADV * KEN * /WE * /BRDY * /QO * Q1 

54 = ADV * KEN * /WE * BRDY * /QO * /Q1 

55 = /ADV * KEN * /WE * BRDY * /QO * /Q1 

56 = /ADV * /KEN * /WE * /BRDY * /QO * Q1 

57 = /ADV * KEN * /WE * /BRDY * /QO * /Q1 

58 = /ADV * KEN * /WE * /BRDY * /QO * Q1 

59 = ADV * KEN * /WE * BRDY * /QO * Q1 
S10 = /ADV * KEN * /WE * /BRDY * QO * Q1 
SI 1 = /ADV * /KEN * /WE * /BRDY * QO * /Q1 


; elk frequency 33mhz 

; address strobe from 486 

; multiplexed read/write strobe 

; BLAST from the 486 

; CE from the address decoding logic 

; informs interface to changes to the SFI Configuration 

; BOFF input to processor 

; lower address lines from the 486 used 

; in loading the counter 

; system reset 


; address valid input 
; cache control 
; output enable input 
; write enable input 
; initiating a burst cycle, 486 input 
; state variable 
; state variable 

; lower bit of the 2bit counter 
; higher bit of the 2bit counter 

; load 
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S12 = /ADV * /KEN * WE 

* /BRDY 

* /QO * /Q1 

S13 = /ADV * /KEN * WE 

* /BRDY 

*/Q0* Q1 

S14 = /ADV*/KEN*/WE 

* BRDY 

* QO * /Q1 

; state transitions 



SO := ADS * /BOFF 

-> SO 

; start of an access 

+ /ADS * AVR * /BOFF 

->S1 


+ /ADS * WR * /BOFF 

-> Sll 


SI :=/CFG*/CE 

->S6 

; not reconfigured 

+ CFG * /CE 

->S2 

; reconfig active low 

+ CE 

-> SO 


S2 := /CFG * BOFF 

-> S7 

; if chip enable is de-asserted, 

+ CFG * BOFF 

-> S3 

; quit the access and return 

+ /BOFF 

-> SO 


S3 := /CFG * BOFF 

-> S8 


+ CFG * BOFF 

-> S4 


+ /BOFF 

-> SO 


S4 := /BLAST + /BOFF 

-> so 

; situations will only ocur during 

+ BLAST 

-> S5 

; a BOFF. 

S5 := /BLAST + /BOFF 

-> SO 

; continous cycling until BLAST is 

+ /CFG * BLAST 

->S10 

; presented - end the burst cycle 

+ CFG * BLAST 

-> S5 


S6 :=/BOFF 

-> SO 


+ BOFF 

-> S2 


S7 :=/BOFF 

-> SO 


+ BOFF 

-> S3 


S8 := /BOFF + /BLAST 

-> SO 


+ BOFF 

-> S9 


S9 := /BOFF 

-> SO 


+ BOFF 

-> S5 


S10 :=/BOFF 

-> SO 


+ BOFF 

-> S5 


Sll :=/CE 

-> S12 

; situation will only occur during 

+ CE + /BOFF 

-> SO 

; during a BOFF. 

S 12:= /BOFF 

-> SO 


+ BOFF 

-> S13 


S13 := /BOFF 

-> SO 


+ BOFF 

-> S14 


S14 := VCC 

-> SO 


EQUATIONS 



; implement RESET 



GLOBAL.RSTF = /RESET 


; implement 2-bit burst counter 


CTR1 := (LD * A3) + (/LD * INC * 

/CTR1 * SI) 

+ (/LD * INC * CTR1 

* /S2) + (/LD * /INC * CTR1 * /S2) 

CTRO := (AVR * LD * A2) + (/LD 

* INC * /CTRO) + (/LD * /INC * CTRO) 

; output enable control, triggered on falling clock edge 

OE := S2 + S3 + S4 + S5 + S7 + S8 + S9 + S10 

OE.CLKF = /CLK 
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1.0 INTRODUCTION 

This technical paper describes several designs 
interfacing the high-performance 28F016XS Flash 
memory to the i960® microprocessor family. All 
designs are based on preliminary 28F016XS 
specifications. Please contact your Intel or distribution 
sales office for up-to-date specifications before 
finalizing any design. 

The 28F016XS is a 16-Mbit block erasable flash 
memory with a high-performance synchronous 
pipelined read interface. This optimized interface can 
sustain a high read transfer rate and makes the 
28F016XS the ideal flash memory component when 
interfacing to a burst processor, such as the 
i960 microprocessor. The 28F016XS combines ROM- 
like non-volatility, DRAM-like read performance and 
in-system update ability in one memory technology. 
These characteristics enable code execution directly 
from the 28F016XS memory space, replacing the 
costly practice of shadowing code from HDD or ROM 
to DRAM. The i960 microprocessor family sees 
widespread use in various applications, including 
imaging and data communications. Combined, the 
28F016XS and the i960 processor constitute a rugged, 
high performance and cost-effective solution. 

The 28F016XS performs synchronous pipelined reads. 
Up to three accesses can be initiated before reading 
data output from the initial cycle. This pipelined 
structure is ideal for use with the i960 microprocessor’s 
burst transfer mechanism. The 28F016XS brings 
significant system performance enhancements to an 
i960 microprocessor-based environment. This technical 
paper describes processor-to-memory interfaces that 
exploit these capabilities to achieve maximum system 
performance. Figures 1 and 2 illustrate relative system 
performance enhancements that the 28F016XS brings 
to an i960 microprocessor-based environment, 
compared to other technologies. The benchmark 
parameters are documented in Appendix B. 


Relative System 
Performance (%) 



UDP/IP Networking Imaging Benchmark 

Benchmark 


7500_01 


Figure 1. Relative System Performance 
Enhancement of the 28F016XS Compared to 
Other Memory Technologies in an 
i960 KB-25 Microprocessor-Based Design 


Relative System 
Performance (%) 



UDP/IP Networking Imaging Benchmark 

Benchmark 


7500.02 


Figure 2. Relative System Performance 
Enhancement of the 28F016XS Compared to 
Other Memory Technologies in an 
i960 CA-33 Processor-Based Design 
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2.0 i960 CA-33 MICROPROCESSOR INTERFACE 



Figure 3. Minimal Logic Required in Interfacing the 28F016XS-15 to the i960 CA-33 Microprocessor to 
Sustain 3-0-0-0-2-0-0-0.. Burst Pipelined Read Performance Up to 33 MHz 


Using this interface, an i960 CA-33 microprocessor 
based system executing code directly out of the 
28F016XS can achieve 3-0-0-0-2-0-0-0. . .wait-state 
read performance. This interface supports both burst 
transfers and address pipelining. For schematic and PLD 
files contact your Intel or distrution sales office. 


2.1 Circuit Description 

This section describes the 28F016XS-15 interface to the 
i960 CA-33 microprocessor interface block diagram in 
Figure 3. 

Memory Configuration 

This design uses two 28F016XS-15s, in xl6 mode, to 
match the i960 CA microprocessor’s 32-bit data bus, 
providing 4 Mbytes of flash memory. Signals A 2 i_ 4 from 
the i960 CA microprocessor and CTR,^ from the PLD 
select locations within the 28F016XS memory space, 
arranged as 1-Meg double words. The two-bit counter 
implemented in the PLD loads from the processor’s 
lower addresses at the beginning of each memory cycle 


and generates the lower two bits of the burst addresses 
on its outputs CTRj.q. The counter feeds burst addresses 
so that the 28F016XS-15s do not stall waiting for the 
processor to supply the next address. 

Chip Select Logic 

Chip select decode logic may use A 31 _ 22 to generate an 
active low chip select signal, CE#, for the 28F016XS-15 
memory space and other system peripherals. The chip 
select drives CE 0 # on each 28F016XS-15 and a control 
input to the PLD. The 28F016XS-15’s CE,# input is 
grounded. 

In support of address pipelining, the chip select logic 
latches CE#, holding it active throughout the duration of 
the memory access. This will prevent potential CE# 
problems caused by using combinatorial logic when 
utilizing the address pipelining capability of i960 CA 
microprocessor. 

If address pipelining functionality is not implemented, 
simple combinatorial logic can be utilized in generating 
the system CE# for the 28F016XS memory space, and 
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the chip select logic shown in Figure 3 does not examine 
BLAST# and ADS#. For many systems using the upper 
address bits in a linear selection scheme may provide a 
sufficient number of chip select signals, thus eliminating 
system chip select decode logic. (See Figure 4 for an 


example of using linear selection for chip selects.) When 
using a linear chip select scheme however, the software 
must avoid using addresses that may select more than 
one device, which could result in bus contention. 


Separate Address Bus 


Multiplexed Address / Data Bus 


A 22 Chip Select 1 


i960® A 23 Chip Select 2 

i960® 

Processor 

Processor 

A 24 Qhip Select 3 



LAD 31-0 


22 — Chip Select 1 

Octal Az3 — Chip Select 2 
Latches 

A 24 -- J Chip Select 3 


Chip Select 


Address Space 


1 01800000- 01 BFFFFFH 

2 01400000- 01 7FFFFFH 

3 00C00000 - OOFFFFFF H 


Figure 4. Example of Using Linear Chip Selection 


Flash 


SYSTEM.RESET# 



Figure 5. Example RESET Generation Circuitry 
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CLK Option 

A 33 MHz clock signal drives the i960 CA 
microprocessor CLKIN input. Driving CLKMODE to a 
logic “1” configures the i960 CA microprocessor for a 
lx CLK input. The i960 CA microprocessor outputs an 
internally-referenced 33 MHz clock on its PCLK1 and 
PCLK2 pins (the signals on PCLK1 and PCLK2 are 
identical), which drives the CLK inputs of the PLD and 
the 28F016XS-15s. 


Reset 

An active-low reset signal, RESET#, connects to the 
RESET# inputs of the i960 CA microprocessor, and the 
PLD, and to the RP# input of the 28F016XS-15s. 
Figure 5 illustrates a suggested logic configuration for 
generating RESET#. 

Interface Control Signals 

The i960 CA-33 microprocessor external bus signals, 
BLAST#, ADS# and W/R#, serve as inputs to the state 
machine, which controls the two-bit counter and 
generates OE#, WE# and ADV#. The counter is loaded 
at the beginning of the memory access, generating the 
burst addresses to the 28F016XS-15s. ADV# indicates 
that a valid address is available to the 28F016XS-15. 
Addresses are latched and a read cycle is initiated on a 
rising CLK edge. WE# controls writes to the 28F016XS- 
15, latching data into the 28F016XS-15 on its rising 
edge if the applicable timing requirements are satisfied. 

Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal input to the state machine. The 
configuration signal must reset to logic “0” on power-up 
and system reset to ensure that the operation of the state 
machine matches the initial configurations of the 
28F016XS-15s and the i960 CA microprocessor. After 
optimizing the 28F016XS-15s and i960 CA 
microprocessor, the configuration signal must switch to 
logic “1.” 

Additional 28F016XS Control Signals 

The BYTE# input to the 28F016XS-15s is tied to 5.0V 
to configure the 28F016XS-15s for xl6 mode, and A 0 is 
tied to GND (A 0 is only used for byte addressing). A 
GPIO controls the write protect input, WP#, to the 
28F016XS-15s. As shown in Figure 3, the 28F016XS-15 
is compatible with either a 5.0V or a 12.0V Vpp voltage 
and is completely write protected by switching V PP to 


GND. When V PP drops below V PPLK , the 28F016XS-15 
will not successfully complete Program and Erase 
operations. Figure 3 also illustrates the 28F016XS-15 
RY/B Y# output connected to a system interrupt for 
background erase operation. RY/BY#, WP#, and Vpp 
implementation are application dependent. See the 
Additional Information section of this technical paper 
for documentation that cover these topics in more detail. 

2.2 Software Interface Considerations 


Boot-up Capability / Configuration 

This interface supports processor boot-up from the 
28F016XS memory space upon power-up or system 
reset. However, the boot code must follow some 
restrictions until it has properly configured the 
28F016XS-15s, i960 CA microprocessor and CFG state 
machine input valve. In the default configuration state, 
the i960 CA microprocessor supports only non-burst 
reads and writes. Program control should jump to an 
area of RAM to execute the configuration sequence. The 
code will configure the 28F016XS-15s and all necessary 
i960 CA microprocessor programmable attributes before 
setting the CFG input to logic “1.” Table 1 illustrates the 
required configuration settings for both the 
28F016XS-15s and the i960 CA-33 microprocessor. 


Table 1. Configuration Settings for the 
28F016XS-15 and i960 CA-33 Microprocessor 
Employing Address Pipelining at 33 MHz 


Part 

Parameter 

Setting 

28F016XS-15 

(5VV CC ) 

SFI Configuration 

2 

i960 CA-33 
Microprocessor 

Ready Inputs 

OFF 


Byte Ordering 

LITTLE 

ENDIAN 


Bus Width 

32-BIT 


Wait-States: 

Nrad 

3 


Nrdd 

0 


Nwad 

2 


Nwdd 

2 


Nxda 

0 


Address Pipelining 

ON 


Burst mode 

ON 
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2.3 Single and Burst Read Cycle 
Description 

Refer to the read cycle timing diagrams (Figures 7 and 
8) and the state diagram (Figure 6) for the following 
read cycle discussion. 



ADS#=0 
* W_R#=0 


BLAST#=0 
, * ADS#=0 


BLAST#=0\ 
* ADS#=0 


BLAST#=0> 
* ADS#=1 



NOTE: 

OE# and WE# are clocked on the inverted CLK edge 


Figure 6. Read State Diagram of Single and Address Pipelined Burst Control Interface 

Shown in Figure 3 
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Initial Configuration 

Figure 7 illustrates a read cycle with the 28F016XS-15s 
and i960 CA microprocessor in a power-up/reset 
configuration state. The initial configuration permits 
only non-burst transfers. The i960 CA microprocessor 
initiates a read cycle by asserting ADS# with W/R# = 
“0,” presenting the valid address and control signals. At 
N = 1, the two-bit counter loads the values on the 
processor’s lower address lines, A 3 . 2 . The state machine 
asserts ADV# for the next clock (N = 2), where the 
28F016XS-15 will latch in the address if CE# is 
asserted. If CE# is not asserted, the state machine returns 
to inactive state at N = 2. 


intel. 

If the flash memory is selected, the state machine will 
assert ADV# for only one clock before entering a hold 
state to await the assertion of BLAST# by the i960 CA 
microprocessor. The state machine asserts OE# (to meet 
timing requirements OE# is falling-edge triggered) on 
the falling edge between N = 2 and N = 3 to enable the 
28F016XS-15 data output buffers. With SFI 
Configuration = 4, the data will be valid at the N = 7. 
The 28F016XS-15s will hold data on the bus until the 
i960 CA microprocessor asserts BLAST#. During the 
clock period following N = y, the state machine returns 
to its inactive state, de-asserting OE# to tri-state the 
28F016XS-15 data outputs. 



Figure 7. Example Read Cycle, Initial Configuration, Showing Key Specifications Requiring 

Consideration 
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Optimized Configuration 

Figure 8 illustrates a two double-word burst read 
followed by a four double-word burst read with the 
28F016XS-15s, i960 CA microprocessor and state 
machine configured for optimum read performance. 
With CFG = 1, the counter increments the two lower bits 
of the address at N = 2, N = 3 and N = 4, and ADV# 
remains asserted so that the 28F016XS-15 latches in 
four successive addresses at N = 2-5. With 
SFI Configuration = 2, the first data will be available at 
N = 5 for the processor to read. If a second read cycle 
follows the current read cycle, the i960 CA 
microprocessor will assert ADS# one clock after 
asserting BLAST#. The state machine will respond by 
immediately re-entering the read cycle. Otherwise, the 


state machine will return to its inactive state waiting for 
a new access targeting the 28F016XS memory space. 

When implementing the i960 CA microprocessor 
address pipelining capability, the state machine 
controlling CE# monitors the upper address lines, ADS# 
and BLAST#. CE# is held active upon detecting an 
access targeting the flash memory space until BLAST# 
is asserted with ADS# de-asserted. When BLAST# and 
ADS# are active at the same time, a pipelined read 
access is in progress. If the current pipelined access is 
aimed at the 28F016XS memory space, the CE# state 
machine will hold CE# active until BLAST# is sampled 
active again. 
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Figure 8. Example Two Double-Word Burst Read Followed by Pipelined Four Double Word Burst 
Read Showing Key Specifications Requiring Consideration 
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Critical Timings 

Table 2 describes the critical timings illustrated in 
Figures 7 and 8. One particularly critical timing in this 
designs, is the data hold time. The i960 CA-33 
microprocessor requires a 5 ns hold time after the clock 
edge. The 28F016XS-15 guarantees a 5 ns data hold 
after clock, meeting the processor's hold requirement 
with 0 ns of margin. 

This design provides 7 ns of margin to meeting the 3 ns 
setup time of the i960 CA-33 microprocessor data 
inputs, outputting data tc H Q V after a rising CLK edge. 

Another critical area concerns CE# during pipelined 
read accesses. Since the 28F016XS-15 specifies zero 


data hold from CE# going high, the chip select state 
machine must hold CE# active for 5 ns to satisfy the 
i960 CA-33 microprocessor data input hold specification 
of 5 ns. Hence, the chip select state machine holds CE# 
active for an additional clock period after detecting 
BLAST# active. 

The i960 CA-33 microprocessor control outputs ADS# 
and W/R# have 3 ns of margin and BLAST# has 5 ns of 
margin to meeting the 22V 10- 15 input setup 
requirement. 

Consult the appropriate datasheets for full timing 
information. 


Table 2. Example Read Cycle Timing Specifications at 5V V cc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

22V10-15 

*sui 

Input Setup Time to CLK 

9 

i960 CA-33 
Microprocessor 

T,si 

Input Setup D 31 _ 0 

3 

Tihi 

Input Hold D 3 i_ 0 

5 

28F016XS-15 

tELCH 

CE# Setup to CLK 

25 

fyLCH 

ADV# Setup to CLK 

15 

UvCH 

Address Setup to CLK 

15 

tGLCH 

OE# Setup to CLK 

15 


NOTE: 


Consult appropriate datasheets for up-to-date specifications. 
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2.4 Single Burst Write Cycle 
Description 


Refer to the write cycle timing diagrams and the state 
diagram (Figure 9) for the following write cycle 
discussion. 



Initial Configuration 

Figure 10 illustrates a write cycle. In the reset/power-up 
configuration state, the interface supports only non-burst 
writes. The i960 CA microprocessor initiates a write 
cycle by asserting ADS# with W/R# = “1,” presenting a 
valid address and control signals. At N = 1, the two-bit 
counter loads the values on address bits A 3 . 2 . The state 
machine asserts WE# (to meet timing requirements, 
WE# is falling-edge triggered) on the falling edge 
between N = 1 and N = 2. WE# remains asserted for two 
clock periods, in order to meet the 28F016XS-15 timing 
requirements. The state machine then enters a holding 
state until the processor asserts BLAST#, after which 
time the interface state machine will return to SO. 


Optimized Configuration 

Figure 1 1 illustrates a two double-word burst write with 
CFG = “1.” When the first data write is complete at 
N = 4, the counter increments the two lower address bits, 
and the state machine asserts WE# on the next falling 
clock edge to begin the next the 28F016XS-15 data 
write. The i960 CA microprocessor must provide the 
next data during the clock period following N = 4. The 
data writes continue to the next consecutive addresses 
until the i960 CA microprocessor asserts BLAST#, 
indicating the end of the burst write cycle. 


Figure 9. Write State Diagram of Control 
Interface Shown in Figure 3 
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Figure 10. Example Write Cycle, Initial Configuration, Showing Key Specifications Requiring 

Consideration 



Figure 11. Example Two Double-Word Burst Write Illustrating Key Specifications Requiring 

Considerations 
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Critical Timings 

Table 3 describes the critical timings illustrated in 
Figures 10 and 11. 

One critical hold time to notice is t WHAX . WE# is 
guaranteed to transition within 8 ns from the falling 
clock edge. Therefore, the t WHAX requirement has 2 ns 
of margin on CTR^q, and 5 ns of margin on A 31 _ 4 . 


Table 3. Example Write Cycle Timing Parameters at 5V V cc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

22V10-15 

*sui 

Input Setup Time to CLK 

9 

28F016XS-15 

^ELWL 

CE# Setup to WE# Going Low 

0 

WwL 

Address Setup to WE# Going Low 

0 

twLWH 

WE# Pulse Width 

50 

*DVWH 

Data Setup to WE# Going High 

50 

*WHDX 

Data Hold from WE# High 

0 

*WHAX 

Address Hold from WE# High 

5 

twHEH 

CE# Hold from WE# High 

5 


NOTE: 

Consult appropriate datasheets for up-to-date specifications. 
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Also notice that CTR^q must be valid before WE# is 
asserted. CTR^q are guaranteed valid 8 ns after the 
rising clock edge, providing 9 ns of margin. 

Consult the appropriate datasheets for full timing 
information. 
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3.0 Optimized I960 JF MICROPROCESSOR INTERFACE 



Figure 12. Minimal Interface Logic Required in Interfacing the 28F016XS-15 to the 
i960 JF-33 Microprocessor to Sustain 2-0-0-0 Burst Read Performance Up to 30 MHz 


Using this interface, the 28F016XS interface to the i960 
JF-33 microprocessor can achieve 2-0-0-0 wait-state 
read performance up to 30 MHz, supporting burst 
transfers. Contact your Intel or distribution sales office 
for schematic and PLD files for the design documented 
in the section. 

See Section 4.0 for an alternative i960 JF design. 

3.1 Circuit Description 

This design, illustrated in Figure 12, uses two 
28F016XS-15s to match the 32-bit data bus of the i960 
JF-33 microprocessor. This configuration provides the 
system with 4 Mbytes of flash memory. Four octal 
latches, enabled by the LE signal, de-multiplex the 32- 
bit address from the AD bus. The latched address bits 
QA 21.4 and the counter outputs CTRj.q from the PLD 
select locations within the 28F016XS memory space. 
The two-bit counter implemented in the PLD loads and 
increments the processor’s lower address lines at the 
beginning of each memory cycle. The processor supplies 
the 28F016XS-15s with the initial address during a read 
transaction, and the counter provides the subsequent 


burst addresses for the remaining duration of the read 
transaction. 

CLK Option 

A 33 MHz clock signal drives the i960 CA 
microprocessor CLKIN input. The buffer then delays the 
system CLK and drives the PLD and 28F016XS-15s. 
The buffer introduces an intentional system clock skew, 
providing additional time for the processor to meet the 
28F016XSs’ address setup time. At a slower operating 
frequency, this intentional delay may not be required to 
satisfy the 28F016XSs’ address setup specification. 


Multiplexer (MUX) 

To achieve this type of wait-state profile, the processor 
directly loads the 28F016XSs with the address of the 
first access. The interface logic enables the MUX to 
permit the processor’s lower address lines, A 3 - 2 , access 
to the lower flash memory address lines during the 
initial access of a burst or single read transaction. Next, 
the interface logic switches the data flow path through 
the MUX. The two-bit counter integrated into the 
control logic then takes over, driving the 28F016XSs’ 
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A 2-1 address inputs. The counter supplies the flash 
memory with consecutive burst addresses for the 
remaining duration of the read transaction. 

Reset 

An active-low reset signal, RESET#, connects to the 
RESET# inputs of the i960 JF microprocessor and PLD 
and to the RP# input of the 28F016XS-15. Figure 5 
illustrates a suggested logic configuration for generating 
RESET#. 

Interface Control Signals 

ADS# and W/R# i960 JF microprocessor signals, just as 
in the i960 CA microprocessor design, serve as inputs to 
the state machine, which controls the two-bit counter 
and generates the OE#, WE# and ADV# signals for the 
28F016XS-15s. The state machine also generates the 
RDYRCV# signal for the i960 JF microprocessor to 
control the insertion of wait-states during data transfers. 

Configuration Signal 

A general purpose input/output (GPIO) generates the 
configuration signal for input to the state machine. The 
configuration signal must be reset to logic “0” on power- 
up and system reset to ensure that the operation of the 
state machine matches the 28F016XS-15s. After 
optimizing the 28F016XS-15s, the reconfiguration 
signal must switch to a logic “1” to take advantage of 
the new configuration. 


Additional Control Signals 

For information regarding BYTE#, WP#, RY/BY# and 
Vpp, see Section 2.1. 


3.2 Software Interface Considerations 

Boot-up Capability 

This interface supports processor boot-up from the 
28F016XS-15 memory space after power-up or system 
reset. Burst reads and writes may commence with no 
configuration. However, read wait-state performance 
will be 4- 1-1-1 until the SFI Configuration is set to 2 
and the CFG input is set to logic “1.” Program control 
should jump to an area of RAM to execute the 
configuration sequence. A pseudocode flow for this 
configuration sequence is shown below. 

Execute Device Configuration command sequence 

Activate CFG signal 

End 

The SFI Configuration must be set to 2 before the CFG 
input is set to logic “1.” Thereafter, burst read wait-state 
performance will improve to 2-0-0-0. 
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3.3 Burst Read Cycle Description 

Refer to the read cycle timing diagrams and state 
diagram (Figure 13) for the following discussions of the 
read cycle. 



Figure 13. Read State Diagram of Burst Control Interface Shown in Figure 12 
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Figure 14. Example Four Double-Word Burst Read in Initial Configuration Showing Key 
Specifications Requiring Consideration 


Initial Configuration 

Figure 14 illustrates a four double-word burst read cycle 
with the 28F016XS-15s and state machine in a 
reset/power-up configuration state. 

Initially, the interface logic drives LE, ADV# and MUX 
active while waiting for the processor to initiate a read 
cycle targeting the 28F016XSs. With the MUX active, 
the processor drives the lower flash memory address 
lines in anticipation of a flash memory access. During 
this anticipation state, CE# is active to prevent a tELCH 
violation on the first access initiated by the processor. 
The delayed CLK also prevents a possible timing 
violation from occurring by providing the processor with 
sufficient time to meet the 28F016XSs’ tAVCH 
specification when initiating the first access. 

When the i960 JF microprocessor initiates a read cycle 
by asserting ADS# with W/R# = “0,” presenting a valid 
address and control signals, the state machine loads and 
increments the two-bit counter. The counter is 
incremented upon the initial load sequence because the 
processor supplies the flash memory with the initial 
address. 

The state machine will then de-assert ADV# at N = 1 
and switches the data flow path through the MUX. The 
two-bit count then drives the flash memory’s lower 


address lines for the remaining duration of the read 
transaction. The state machine then asserts ADV# at N = 
3 to load the next read address into the 28F016XS-15s. 
De-asserting ADV# for one clock cycle (at N = 2, 4, 6 
and 8) between accesses forces the 28F016XS-15s to 
hold data output for two clock cycles (access stretching), 
which allows time for the data to stabilize and meet the 
timing requirements of the i960 JF microprocessor bus. 

While ADV# is asserted, the counter increments the two 
lower bits of the address, providing successive burst 
addresses. The state machine asserts OE# at N = 4 to 
enable the 28F016XS-15 data output buffers. With the 
SFI Configuration = 4, the data will be valid at the 
i960 JF microprocessor data inputs at N = 6, 8, 10 and 
12 . 

The state machine asserts RDYRCV# to inform the 
i960 JF microprocessor that the data is valid. 
RDYRCV# is returned active at N = 6, 8, 10 and 12. The 
interface will follow this methodology until the 
processor asserts BLAST#, which identifies the end of 
the burst transaction. Upon detecting BLAST# active, 
the interface will transition to its idle state, waiting for 
another bus transaction to take place. 
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Optimized Configuration After the first access is initiated at N = 1, ADV# is held 

active and the counter increments through the remaining 
Figure 15 illustrates a four double-word burst read with burst sequence. Data from the initial access will be 

the 28F016XS-15s and state machine configured for available at N = 4. Subsequent data will be valid at 

optimum read performance. While the state machine N = 5, 6 and 7. All other signal monitoring and 

waits for the i960 JF microprocessor to initiate a read generation is identical to the reset/power-up 

cycle, ADV#, LE and MUX are held active enabling the configuration read cycle documented in the preceding 

processor with the capability of providing the flash section, 

memory with the initial address. 



Figure 15. Example Four Double-Word Burst Read Illustrating Important Timing Parameters 

Requiring Consideration 
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In these two read configurations, there are some 
important timing considerations that need to be taken 
into consideration. Table 4 depicts critical timings that 
are illustrated in Figures 14 and 15. 

First, the buffer delay can cause possible timing 
violations if not chosen correctly for a given system 
operating frequency. The purpose of the buffer is to 
provide sufficient time for the processor to load the 
28F016XSs with the initial address during a read 
transaction. Therefore, the buffer must have a minimum 
delay that satisfies the flash memory’s tAVCH. 


As the previous equation illustrates, the minimum buffer 
delay is dependent upon several different variables: 
CLKIN frequency and latch delay. At a slow operation 
frequency, the interface does not require a buffer delay. 

The buffer can also affect the processor’s data setup 
time. Hence, the buffer must have a maximum delay of 
no greater than: 

1 /CLKIN - tcHQV - tisi = Buffer Delay 

Consult the appropriate datasheets for full timing 
information. 


Latch Delay - tovi - tAVCH -1/CLKIN = Buffer Delay 

Table 4. Example Read Cycle Timing Parameters at 5V V cc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

Buffer 

tPHL.PLH 

Buffer Delay 

1.5 

22V10-15 

*sui 

Input Setup Time to CLK 

9 

28F016XS-15 

*ELCH 

CE# Setup to CLK 

25 


tvLCH 

ADV# Setup to CLK 

15 


WCH 

Address Setup to CLK 

15 


tGLCH 

OE# Setup to CLK 

15 


NOTE: 


Consult appropriate datasheets for up-to-date specifications. 
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Write Configuration 

Figure 17 illustrates a two double-word burst write 
cycle. The i960 JF microprocessor initiates a write cycle 
by asserting ADS# with W/R# = 1 and presenting a 
valid address and control signals. When detecting a 
write operation, the state machine immediately switches 
the data flow path through the MUX. The counter is 
given sole control to drive the 28F016XSs’ lower 
address lines during write operations. At N = 1 with 
ADS# = 0, the two-bit counter loads the values on the 
processor’s lower address lines. The state machine 
asserts WE# (to meet timing requirements, WE# is 
falling-edge triggered) on the falling edge between N = 
1 and N = 2. WE# remains asserted for four clock 
periods, in order to meet 28F016XS-15 timing 
requirements. The state machine asserts RDYRCV# for 
N = 4 to inform the i960 KB microprocessor to supply 
the next data. At N = 4, the counter increments the two 
lower address bits, and the state machine asserts WE# on 
the next falling clock edge to begin the next data write 
to the 28F016XS-15s. The data writes continue until the 
processor asserts BLAST#, noting the end of the current 
write transaction. The SFI Configuration has no effect 
on the write cycle. 



3.4 Burst Write Cycle Description at 
33 MHz 



Figure 16. Write State Diagram of Burst Control 
Interface Shown in Figure 12 
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Critical Timings Consult the appropriate datasheets for full timing 

information. 

Table 5 describes the critical timings illustrated in 
Figure 17. 

Notice that CTR^q, and CS# must be valid before WE# 
is asserted. CTRj.q are guaranteed valid 8 ns after the 
rising clock edge, providing 12 ns of margin. 


Table 5. Example Write Cycle Timing Parameters at 5V Vcc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

22V10-15 

*sui 

Input Setup Time to CLK 

9 

28F016XS-15 

tELWL 

CE# Setup to WE# Going Low 

0 

WwL 

Address Setup to WE# Going Low 

0 

twLWH 

WE# Pulse Width 

50 

WwH 

Data Setup to WE# Going High 

50 

*WHDX 

Data Hold from WE# High 

0 

^WHAX 

Address Hold from WE# High 

5 

twHEH 

CE# Hold from WE# High 

5 


NOTES: 


Consult appropriate datasheets for up-to-date specifications. 
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Figure 18. Minimal Interface Logic Required in Interfacing the 28F016XS-15 to the 
i960 JF-33 Microprocessor to Sustain 3-0-0-0 Burst Read Performance Up to 33 MHz 


The 28F016XS-15 interface to the i960 JF-33 
microprocessor, illustrate in Figure 12, delivers 3-0-0-0 
wait-state read performance up to 33 MHz. The design 
requires only one 22V 10 to handle all interfacing 
requirements. Contact your Intel or distribution sales 
office for schematic and PLD files for the interface 
documented in this section. 

See Section 3.0 for an alternative design. 


4.1. Circuit Description 

This interface is very similar to the optimized i960 JF 
design described in Section 3.0. This design however, 
eliminates the buffer and multiplexer requirement. For 
specific circuitry information involved in this standard 
interface, reference Section 3.0. 


CLK Option 

Unlike the optimized design in Section 3.0, a buffer is 
not implemented in this interface. The 33 MHz system 
clock drives the processor, PLD and flash memory. To 
reduce system clock skew, position the PLD and 


28F016XSs within close proximity to the 

microprocessor. 

4.2. Software Interface Considerations 

This interface supports processor boot-up from the flash 
memory space after power-up or system reset. Initially, 
the read wait-state performance will be 5- 1-1-1 until the 
SFI Configuration value is modified. The 28F016XS 
operates at optimal performance with a 
SFI Configuration value of 2 at 33 MHz. Program 
control should jump to an area of RAM to execute a 
configuration sequence which optimizes the flash 
memory and interface state machine for the given 
operating frequency. 

4.3 Burst Read Cycle Description at 
33 MHz 

Refer to the read cycle timing diagrams and state 
diagram (Figure 13) for the following discussions of the 
read cycle. 
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Figure 20. Example Four Double-Word Burst Read in Initial Configuration Showing Key 
Specifications Requiring Consideration 


Initial Configuration 

Figure 20 illustrates a four double-word burst read cycle 
with the 28F016XS-15s and the state machine in the 
reset/power-up configuration state. The i960 JF 
microprocessor initiates a read cycle by asserting ADS# 
with W/R# = “0,” presenting a valid address and control 
signals. At N = 2 with ADS# = “0” and CLK = “0,” the 
two-bit counter loads the values on the address bits A 3 _ 2 . 

The state machine asserts ADV# after clock edge N = 1 
where the 28F016XS-15s will clock in the first address 
at the next rising clock edge (N=2), if CS# is asserted. If 
CS# is not asserted, the state machine will return to its 
inactive state at N = 2. 

The state machine de-asserts ADV# at N = 2. The state 
machine then asserts ADV# at N = 3 to load the next 
read address into the 28F016XS-15s. De-asserting 
ADV# for one clock cycle (at N = 2, 4, 6 and 8) between 
accesses forces the 28F016XS-15s to hold data output 
for two clock cycles (access stretching), which allows 
time for the data to stabilize and meet the timing 
requirements of the i960 JF microprocessor bus. 


The counter increments the two lower bits of the address 
at N = 3, 5 and 7 to provide the four successive burst 
addresses. The state machine asserts OE# at N = 4 to 
enable the 28F016XS-15 data output buffers. With the 
SFI Configuration = 4, the data will be valid at the 
i960 JF microprocessor data inputs at N = 7. 

The state machine asserts RDYRCV# to inform the 
i960 JF microprocessor that the data is valid. 
RDYRCV# is returned active at N = 7, 9, 11 and 12. 
When sampling BLAST# active, the state machine ends 
the read transfer and returns to an idle state. In the idle 
state, the state machine simply waits for the processor to 
initiate another bus transaction. 
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Optimized Configuration 

Figure 15 illustrates a four double-word burst read with 
the 28F016XS-15s and state machine configured for 
optimum read performance. With the 
SFI Configuration = 2, ADV# is held active and the 
counter increments at N = 2, 3 and 4, supplying the 
28F016XS-15s with four consecutive accesses. Data 


from the initial access will be valid for transfer at N = 5. 
Subsequent data will be valid at N = 6, 7 and 8. This 
interface and 28F016XS-15 configuration improve read 
wait-state performance to 3-0-0-0. All other signal 
monitoring and generation are identical to the 
reset/power-up configuration read cycle documented in 
the preceding section. 



Figure 21. Example Four Double-Word Burst Read Illustrating Important Timing Parameters 

Requiring Consideration 
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Critical Timings 

Table 4 describes the critical timings illustrated in 
Figures 14 and 15. One particularly critical timing in 
this design is the data hold time, which the 
28F016XS-15 meets with 0 ns margin. The 28F016XS 
holds data for 5 ns after a rising clock. 

The 28F016XS-15 will provide data 10 ns before the 
rising edge of the system clock, which satisfies the 
i960 JF-33 microprocessor’s data input requirement. 


ADV# and CTRj.q are guaranteed valid 8 ns after the 
rising clock edge. Setup times for these inputs to 
28F016XS-15 are each 15 ns. Since the clock period is 
30 ns, this allows 7 ns margin for these timings. 

RDYRCV# is guaranteed valid 8 ns after the rising 
clock edge to met the microprocessor's setup time to 
rising clock edge. 

Consult the appropriate datasheets for full timing 
information. 


Table 6. Example Write Cycle Timing Parameters at 5V V cc 


Part 

Symbol 

Parameter 

Minimum Specified 
Value (ns) 

22V10-15 

*sui 

Input Setup Time to CLK 

9 

28F016XS-15 

tELCH 

CE# Setup to CLK 

25 

Wlch 

ADV# Setup to CLK 

15 

WCH 

Address Setup to CLK 

15 

tGLCH 

OE# Setup to CLK 

15 


NOTE: 


Consult appropriate datasheets for up-to-date specifications. 
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4.4 Burst Write Cycle Description at 
33 MHz 

The write interface in for this design behaves similar to 
the optimized design’s write interface described in 
Section 3.4. The only difference between the two 
designs is the absence of the MUX. Therefore, this 
design’s write state machine does not have to concern 
itself with changing the data flow through the MUX. 
Instead, the interface simply loads and holds the address 
presented by the processor for the duration of the write 
operation. 

For further details information about this cycle and write 
timing waveform, refer to Section 3.4. 

5.0 INTERFACING TO OTHER i960 
MICROPROCESSORS 

i960 CF-16, i960 CF-25 and I960 CF-33 
Microprocessors 

The i960 CF microprocessor bus interface is completely 
compatible with the i960 CA microprocessor bus 
interface. Therefore, the 28F016XS-15 interfaces 
described above for the i960 CA-33 microprocessor 
work equally well with the i960 CF-25 and 33 MHz 
microprocessors. 

At 16 MHz, the interface requires a slight modification 
because the SFI Configuration value at 16 MHz 
equals 1. The 28F016XS-15 will begin driving the data 
pin 1 CLK period after initiating a read access. The 
interface returns READY# to the i960 CF-16 
microprocessor, 1 CLK cycle earlier. Therefore, the 
28F016XS-15 interface to the i960 CF-16 

microprocessor will deliver 3-0-0-0 wait-state read 
performance. 

i960 KA and i960 KB Microprocessors 

The 28F016XS interface to the i960 Kx microprocessor 
series will be very similar to the i960 JF interface 
described in Sections 3.0 and 4.0. The only difference 
between the two designs is the i960 Kx’s lack of a 


BLAST# output signal. The i960 JF interfaces use this 
signal to determine the end to the burst transaction. 
Since the i960 Kx microprocessor does not have a 
BLAST# signal, the interface logic must examine the 
processor’s lower address lines to determine the length 
of the read transaction. 

For further detailed information about this interface, 
please reference the i960 JF interfaces. Contact your 
Intel or distribution sales office for schematic and PLD 
files for the 28F016XS interface to the i960 Kx 
microprocessor. 

i960 SA Microprocessor, i960 SB 
Microprocessor 

The 28F016XS’s interface to the i960 Sx microprocessor 
series will be similar to the i960 JF microprocessor 
interfaces, with the following differences: 

• The i960 Sx microprocessor series has a 16-bit data 
bus multiplexed with the lower 16 of 32 address bits. 
Therefore, a single 28F016XS will match the width 
of the data bus. 

° The i960 Sx microprocessor series supports eight 
double- word burst transfers. Therefore, the 

28F016XS interface will require a three-bit counter 
to generate the lower three bits of the burst 
addresses. 

6.0 CONCLUSION 

This technical paper has described the interface between 
the 28F016XS 16-Mbit Flash memory component and 
the i960 microprocessor family. This simple design has 
been implemented with a minimal number of 
components and achieves exceptional read performance. 
The 28F016XS provides the microprocessor with the 
non- volatility and updateability of flash memory and the 
performance of DRAM. For further information about 
the 28F016XS, reference the Additional Information 
section of this technical paper. Please contact your local 
Intel or distribution sales office for more information on 
Intel’s flash memory products. 



28F016XS/i960® Microprocessor Interface 


ADDITIONAL INFORMATION 


Order Number 

Document/Tools 

290532 

28F016XS Datasheet 

297500 

"Interfacing 28F016XS to the Intel486™ Microprocessor 
Family" 

292147 

AP-398, "Designing with the 28F016XS" 

292146 

AP-600, "Performance Benefits and Power/Energy Savings of 28F016XS 
Based System Designs" 

292163 

AP-610, “Flash Memory In-System Code and Data Update Techniques” 

292165 

AB-62, “Compiled Code Optimizations For Embedded Flash RAM 
Memories” 

297372 

16-Mbit Flash Product Family User's Manual 

297508 

FLASHBuilder Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS Benchmark Utility 

Contact Intel/Distribution 
Sales Office 

28F016XS iBIS Models 

Contact Intel/Distribution 
Sales Office 

28F016XS VHDLA/erilog Models 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Timing Designer Library Files 

Contact Intel/Distribution 
Sales Office 

28F01 6XS Oread and ViewLogic Schematic Symbols 



REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Added Optimized i960 JF Microprocessor Interface that Delivers 2-0-0-0 Wait-State 
Performance Up to 30 MHz. 

Removed Detailed i960 KB Microprocessor Interface Description 

Added i960 KB Microprocessor Interfacing Guidelines to Section 5.0, “Interfacing to 
Other i960 Microprocessors” 
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APPENDIX A 
PLD FILES 


PLD file for the standard 28F016XS interface to the i960 CA Microprocessor described in Section 2.0. 


Title 

28F016XS / i960® CA Microprocessor Interface State Machine 

Pattern 

PDS 


Revision 

1 


Authors 

Example 


Company 

Intel Corporation 

- Folsom, California 

Date 

1-25-94 


CHIP 

STATEMACHINE 

85C22V10 

; inputs 

PIN 1 

CLK 


PIN 

ADS_n 

; address status - i960 CA microprocessor 

PIN 

W_R_n 

; W/R# - i960 CA microprocessor 

PIN 

BLAST_n 

; burst last - i960 CA microprocessor 

PIN 

CS_n 

; chip select - 28F016XS 

PIN 

CFG 

; 28F016XS/i960 CA microprocessor config status set input 

PIN 

A2 

; LAD bit 2 

PIN 

A3 

; LAD bit 3 

PIN 

RESET 

; resets all FFs in device 

PIN 25 

GLOBAL 

; virtual pin to implement reset 

; outputs 

PIN 

CTRO 

; burst counter out - 28F016XS-A1 

PIN 

CTR1 

; burst counter out - 28F016XS-A2 

PIN 

/WE 

; write enable - 28F016XS 

PIN 

/OE 

; output enable - 28F016XS 

PIN 

Q0 

; state variables 

PIN 

Ql 


PIN 

/ADV 

; state variable and address valid - 28F016XS 

PIN 

Q3 



; burst counter control signals 
STRING LD '(/ADS_n)' ; load 

STRING INC '(/ADV + ADV * Q3 * Q1 * Q0)’ ; increment 

STATE MOORE_MACHINE 
DEFAULT_BRANCH SO 

; state assignments 

50 = /Q3 * /ADV * /Q1 * IQ 0 

51 = /Q3 * ADV*/Q1*/Q0 

52 = Q3 * ADV * /Q1 * /Q0 

53 = Q3 * ADV * /Q1 * Q0 

54 = /Q3 * ADV * /Q1 * Q0 
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S5= /Q3*/ADV 

*/Ql * QO 



S6 = /Q3*/ADV 

* Q1 */Q0 



S7= Q3*/ADV 

* Q1 * /QO 



S8= Q3*/ADV 

* /Q1 * /QO 


; state transitions 



SO := (/ADS_n * AV R n) 

->S1 ; 

READ cycle 

+ (/ADS_n * W_R_n) 

->S6 ; 

WRITE cycle 


+-> SO ; 

else, stay 

SI := (/CS n * /CFG) 

-> S5 ; 

28F016XS selected, initial configurations 

+ (/CS_n * CFG) 

-> S2 ; 

28F016XS selected, 28F016XS and i960 CA microprocessor configured 


+-> SO ; 

else, return to idle state 

S2 := VCC 

-> S3 


S3 := VCC 

->S4 ; 

28F016XS is configured to wait 4 clocks 

S4 := (/BLASTjn * ADS_n) 

->S0 ; 

1 double word read 

+ (/BLAST_n * /ADS_n) 

->S1 ; 

pipelined read 


+-> S5 ; 

else, continue 

S5 := (/BLAST_n * ADS_n) 

->S0 ; 

burst read finished 

+ (/BLAST_n * /ADS_n) 

->S1 ; 

pipelined read 


+-> S5 ; 

else, continue 

S6 := /CS_n 

->S7 ; 

28F016XS selected, continue 


+-> SO 

else, return to idle state 

S7 := VCC 

-> S8 


S8 := (BLAST_n * CFG) 

->S6 ; 

continue burst 

+ (BLAST_n * /CFG) 

->S8 ; 

pre-config write 


+-> SO ; 

write is finished 

; transition outputs 



SO.OUTF 

= /OE * /WE 



Sl.OUTF 

= /OE * /WE 



S2.0UTF 

= OE * /WE 



S3.0UTF 

= OE * /WE 



S4.0UTF 

= OE * /WE 



S5.0UTF 

= OE * /WE 



S6.0UTF 

= OE * /WE 



S7.0UTF 

= /OE * WE 



S8.0UTF 

= /OE * WE 



S9.0UTF 

= /OE * /WE 



EQUATIONS 



; implement RESET 



GLOB AL.RSTF = /RESET 


; implement 2-bit burst counter - registered counter equations 

CTR1 := (LD * A3) + (/LD * INC * CTRO * /CTR1) 


+ (/LD * INC * /CTRO * CTR1) + (/LD * /INC * CTR1) 

CTRO := (LD * A2) + (/LD * INC * /CTRO) + (/LD * /INC * CTRO) 

; flop OE and WE on falling edge 


OE.CLKF = /CLK 



WE.CLKF = /CLK 
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PLD file for the optimized 28F016XS interface to the i960 JF Microprocessor described in Section 3.0. 


Title 

Pattern 

Revision 

Authors 

Company 

Date 


Optimized 28F016XS/i960® JF Microprocessor Interface State Machine 
PDS 
1 

Example 

Intel Corporation - Folsom, California 
2-16-95 


STATEMACHINE 


85C22V10 


; inputs 

PIN 1 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 25 


CLK 

ADS ; address status - i960 JF microprocessor 

W_R ; W/R# - i960 JF microprocessor 

BLAST ; burst last - i960 JF microprocessor 

CS ; chip setect 

CFG ; 28F016XS/i960 JF microprocessor config status set input 

A2 ; A bit 2 

A3 ; A bit 3 

RESET ; resets all FFs in device 

GLOBAL ; virtual pin to implement reset 


; outputs 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 

PIN 


CTRO 

CTR1 

/WE 

/OE 

/RDYRCV 

MUX 

QO 

Ql 

/ADV 

Q3 


; burst counter out - 28F016XS-A1 
; burst counter out - 28F016XS-A2 
; write enable - 28F016XS 
; output enable - 28F016XS 
; wait-state control 

; control data flow through the multiplexer 
; state variables 

; state variable and address valid - 28F016XS 


; burst counter control signals 
STRING LD '(/ADS)' ; load 

STRING INC '(/ADV + /RDYRCV * Q3 * Ql * QO)’ 

STATE MOORE_MACHINE 
DEFAULT_BRANCH SO 


; increment 


; state assignments 

50 = /RDYRCV * /Q3 * ADV * /Ql * /QO * /OE * /WE * /MUX 

51 = /RDYRCV * /Q3 * ADV * /Ql * QO * OE * /WE* MUX 

52 = /RDYRCV * /Q3 * ADV * Ql * /QO * OE * /WE * MUX 

53 = RDYRCV * /Q3 * ADV * Ql * QO * OE * /WE* MUX 

54 = RDYRCV * /Q3 * /ADV * /Ql * QO * OE * /WE* MUX 

55 = /RDYRCV * /Q3 * /ADV * Ql * /QO * /OE * /WE* MUX 
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56 = /RDYRCV * Q3 * ADV * /Q1 * /QO * OE * AVE * MUX 

57 = /RDYRCV * /Q3 * /ADV * Q1 * QO * OE * /WE* MUX 

58 = /RDYRCV* Q3 * ADV*/Q1* QO * OE*/WE*MUX 

59 = RDYRCV * Q3 * /ADV * /Q1 * /QO * OE * /WE* MUX 
S10 = /RDYRCV * Q3 * ADV * Q1 * /QO * OE * /WE* MUX 
SI 1 = /RDYRCV * Q3 * /ADV * /Q1 * QO * OE * /WE* MUX 

513 = /RDYRCV * Q3 * /ADV * Q1 * /QO * /OE * WE* MUX 

514 = /RDYRCV * Q3 * /ADV * Q1 * QO * /OE * WE* MUX 

515 = RDYRCV * Q3 * /ADV * Q1 * QO * /OE * /WE* MUX 


; state transitions 



SO := 

(/ADS * /W_R * 

CFG) ->S1 

; READ cycle 

+ 

(/ADS * /W_R * 

/CFG) ->S5 


+ 

(/ADS * W_R) 

-> S13 

; WRITE cycle 



+-> SO 

; else, stay 

SI := 

/CS 

-> S2 

; 28F016XS selected, init configurations 

+ 

cs 

-> SO 

; 28F016XS selected, optimized configured 

S2 := 

vcc 

-> S3 


S3 := 

(/BLAST) 

-> SO 

; 1 double word read 



+-> S4 

; else, continue 

S4 := 

/BLAST 

-> SO 

; burst read finished 

+ 

(BLAST * CFG) 

-> S4 

; continue, optimized configuration 

+ 

(BLAST * /CFG) 

->S11 

; continue, initial configuration 

S5 := 

VCC 

->S6 


S6 := 

VCC 

-> S7 


S7 := 

VCC 

-> S8 


S8 := 

VCC 

-> S9 


S9 := 

/BLAST 

-> SO 

; BLAST - end of the burst read transaction 

+ 

BLAST 

->S10 


S10:= 

VCC 

-> S4 


Sll:= 

VCC 

-> S4 


S13:= 

CS 

-> SO 

; write cycle control 

+ 

/CS 

-> S14 


S14:= 

vcc 

-> S15 


S15:= 

BLAST 

-> S13 

; BLAST - end of burst write transaction 

+ 

/BLAST 

-> SO 



EQUATIONS 
; implement RESET 

GLOBAL.RSTF = /RESET 

; implement 2-bit burst counter - registered counter equations 
CTR1 := (/WR * LD * A3 * /A2) + (WR * LD * A3) + (/LD * INC * CTRO * /CTR1) 

+ (/LD * INC * /CTRO * CTR1) + (/LD * /INC * CTR1) 

CTRO := (/WR * LD * /A2) + (WR * LD * A2) + (/LD * INC * /CTRO) + (/LD * /INC * CTRO) 
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PLD file for the standard 28F016XS interface to the i960 JF Microprocessor described in Section 4.0. 


Title 

28F016XS/i960® JF Microprocessor Interface State Machine 

Pattern 

PDS 


Revision 

1 


Authors 

Example 


Company 

Intel Corporation 

- Folsom, California 

Date 

8-16-94 


CHIP 

STATEMACHINE 

85C22V10 

; inputs 

PIN 1 

CLK 


PIN 

ADS 

; address status - i960 FJ microprocessor 

PIN 

W_R 

; W/R# - i960 FJ microprocessor 

PIN 

BLAST 

; burst last - i960 JF microprocessor 

PIN 

CS 

; chip setect 

PIN 

CFG 

; 28F016XS/i960 JF microprocessor config status set input 

PIN 

A2 

; A bit 2 

PIN 

A3 

; A bit 3 

PIN 

RESET 

; resets all FFs in device 

PIN 25 

GLOBAL 

; virtual pin to implement reset 

; outputs 

PIN 

CTRO 

; burst counter out - 28F016XS-A1 

PIN 

CTR1 

; burst counter out - 28F016XS-A2 

PIN 

/WE 

; write enable - 28F016XS 

PIN 

/OE 

; output enable - 28F016XS 

PIN 

/RDYRCV 

; wait-state control 

PIN 

Q0 

; state variables 

PIN 

Ql 


PIN 

/ADV 

; state variable and address valid - 28F016XS 

PIN 

Q3 



; burst counter control signals 
STRING LD '(/ADS)' ; load 

STRING INC '(/ADV + /RDYRCV * Q3 * Q1 * Q0)' ; increment 


STATE MOORE_MACHINE 

default_branch SO 

; state assignments 

50 = /RDYRCV * /Q3 * /ADV * /Q1 * /Q0 * /OE * /WE 

51 = /RDYRCV * /Q3 * ADV * /Q1 * /Q0 * /OE * /WE 

52 = /RDYRCV * /Q3 * ADV * /Q1 * Q0 * OE * /WE 

53 = /RDYRCV * /Q3 * ADV * Q1 * /Q0 * OE * /WE 

54 = RDYRCV * /Q3 * ADV * Q1 * Q0 * OE * /WE 

55 = RDYRCV * /Q3 * /ADV * /Q1 * Q0 * OE * /WE 

56 = /RDYRCV * /Q3 * /ADV * Q1 * /Q0 * /OE * /WE 
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57 = /RDYRCV * Q3 * ADV * /Q1 * /QO * OE * AVE 

58 = /RDYRCV * /Q3 * /ADV * Q1 * QO * OE * AVE 

59 = /RDYRCV * Q3 * ADV * /Q1 * QO * OE * /WE 

510 = RDYRCV * Q3 * /ADV * /Q1 * /QO * OE * AVE 

511 = /RDYRCV * Q3 * ADV * Q1 * /QO * OE * /WE 

512 = /RDYRCV * Q3 * /ADV * /Q1 * QO * OE * /WE 

513 = /RDYRCV * Q3 * /ADV * Q1 * /QO * /OE * WE 

514 = /RDYRCV * Q3 * /ADV * Q1 * QO * /OE * WE 

515 = RDYRCV * Q3 * /ADV * Q1 * QO * /OE * /WE 

; state transitions 


SO := 

(/ADS * /W_R) 

->S1 

; READ cycle 

+ 

(/ADS * W_R) 

-> S13 

; WRITE cycle 



+-> SO 

; else, stay 

SI := 

(/CS * /CFG) 

-> S6 

; 28F016XS selected, init configurations 

+ 

(/CS * CFG) 

-> S2 

; 28F016XS selected, optimized configured 



+-> SO 

; else, return to idle state 

S2 := 

vcc 

-> S3 


S3 := 

vcc 

-> S4 

; 28F016XS is configured to wait 4 clocks 

S4 := 

(/BLAST * ADS) 

-> SO 

; 1 double word read 



+-> S5 

; else, continue 

S5 := 

/BLAST 

-> SO 

; burst read finished 

+ 

(BLAST * CFG) 

-> S5 

; continue, optimized configuration 

+ 

(BLAST* /CFG) 

-> S12 

; continue, initial configuration 

S6 := 

VCC 

-> S7 


S7 := 

VCC 

-> S8 


S8 := 

VCC 

-> S9 


S9:= 

VCC 

->S10 


S10:= 

/BLAST 

-> SO 

; BLAST - end of the burst read transaction 

+ 

BLAST 

-> Sll 


Sll:= 

VCC 

-> S5 


S12:= 

VCC 

-> S5 


S13:= 

CS 

-> SO 

; write cycle control 

+ 

/CS 

-> S14 


S14:= 

vcc 

-> S15 


S15:= 

BLAST 

-> S13 

; BLAST - end of burst write transaction 

+ 

/BLAST 

-> SO 



EQUATIONS 
; implement RESET 

GLOB AL.RSTF = /RESET 

; implement 2-bit burst counter - registered counter equations 
CTR1 := (LD * A3) + (/LD * INC * CTRO * /CTR1) 

+ (/LD * INC * /CTRO * CTR1) + (/LD * /INC * CTR1) 
CTRO := (LD * A2) + (/LD * INC * /CTRO) + (/LD * /INC * CTRO) 
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APPFNDIY R 

BENCHMARK PERFORMANCE 
ANALYSIS 


The following section provides detailed memory technology information used in the performance analysis (UDP/IP 
Networking and Imaging Benchmarks) contained in the introduction. The performance analysis was based on actual 
memory component performance in an i960 processor-based environment. System interface delay between 
microprocessor and memory was not included in the analysis. The two benchmarks illustrate relative system memory 
performance. 

A. 28F016XS Flash Memory 


28F016XS is capable of 3-1-1-1-1-1-1-1. . .read performance at 5.0V V cc and 33 MHz or 25 MHz 
(2-0-0-0-0-0-0-0. . .in terms of wait-states). The benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

1.30 

1.64 

i960 CA-33 
Microprocessor 

.89 

.89 

i960 CF-33 
Microprocessor 

.53 

.59 


B. 16-Mbit DRAM 

16-Mbit DRAMs were, at the time this technical paper was published, only beginning to ramp into production. Only 
advance information for the wider xl6, 16-Mbit DRAMs was available for use in the calculations that follow. 

Sequential reads allow use of the DRAM fast page mode. Assumed DRAM specifications are shown below: 

• 80 ns tg^c, 40 ns t^ (5.0V V cc ) 

• 256 word (512 byte) page buffer 


Therefore, 16-Mbit DRAMs are capable of 3-2-2-2-2-2-2-2. . .read performance at 33 MHz and 25 MHz 
(2-1-1-1-1-1-1-1 in terms of wait-states. . .). The benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

1.88 

1.89 

i960 CA-33 
Microprocessor 

1.06 

1.03 

i960 CF-33 
Microprocessor 

.59 

.64 
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C. 4-Mbit EPROM 

Calculations that follow used the xl6 version of the 4-Mbit EPROM (Intel 27C400 or equivalent). 


The assumed 5.0V Vcc^ -Mbit EPROM random access time is 150 ns. Therefore, 4-Mbit EPROMs are capable of 5-5- 
5-5-5-5-5-5. . .read performance at 5.0V v cc and 33 MHz (4-4-4-4-4-4-4-4. . .in terms of wait-states). The 
benchmarking analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

NA 

NA 

i960 CA-33 
Microprocessor 

1.56 

1.49 

MBSM 

.78 

.81 


D. 16-Mbit PAGED MASK ROM 

Calculations that follow used the xl6 version of the 16-Mbit paged mask ROM, which is not yet widely available from 
multiple vendors. The x8, 16-Mbit paged mask ROM is the more common version today. 

Sequential reads allow use of the mask ROM page mode. The assumed 5.0V V cc 16-Mbit mask ROM random access 
time is 150 ns, with 75 ns accesses in page mode (4-word page). Therefore, 16-Mbit mask ROMs are capable of 5-3-3- 
3-5-3-3-3. . .read performance at 5.0V v cc and 33 MHz (4-2-2-2-4-2-2-2. . .in terms of wait-states). The benchmarking 
analysis is shown below: 



UDP/IP Networking Benchmark 

Imaging Benchmark (sec) 

Time (sec) 

Time (sec) 

i960 KB-25 
Microprocessor 

NA 

NA 

i960 CA-33 
Microprocessor 

1.35 

1.30 


■71 

.73 
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In contrast, Intel flash memory is inherently nonvolatile, 
and the single transistor cell design of Intel’s ETOX 
manufacturing process is extremely scaleable, allowing 
the development of continuously higher densities and 
steady cost improvement over SRAM (Figure 2). 



— EPROM (electrically programmable read-only 
memory) is a mature, high-density, nonvolatile 
technology which provides a degree of 
updatability not found in ROM. An OEM may 
program EPROM as needed to accommodate 
code changes or varying manufacturing unit 
quantities. Once programmed, however, the 
EPROM may only be erased by removing it from 
the system and then exposing the memory 
component to ultraviolet light — an impractical 
and time-consuming procedure form many OEMs 
and a virtually impossible task for end-users. 

Unlike EPROM, flash memory is electrically re-writable 
within the host system, making it a much more flexible 
and easier to use alternative. Flash memory offers 
OEMs not only high density and nonvolatility, but 
higher functionality and the ability to differentiate their 
systems. 



Intel 

ETOX Flash 

EEPROM 

Transistors 

1 

2 

Cell Size 

(1 -Micro Lithography) 

15 fx 

38 ji 

Cycling Features 

0.1% 

5% 


Figure 3 


— EEPROM (electrically erasable programmable 
read-only memory) is nonvolatile and electrically 
byte-erasable. Such byte-alterability is needed in 
certain applications but involves a more complex 


cell structure, and significant trade-offs in terms 
of limited density, lower reliability and higher 
cost, making it unsuitable as a mainstream 
memory. 

Unlike EEPROM, Intel flash memory technology 
utilizes a one- transistor cell, allowing higher densities, 
scalability, lower cost, and higher reliability, while 
taking advantage of in-system, electrical erasability 
(Figure 3). 

— DRAM (dynamic random access memory) is a 
volatile memory known for its density and low 
cost. Because of its volatility, however it requires 
not only a constant power supply to retain data, 
but also an archival storage technology, such as 
disk, to back it up. 

Partnered with hard disks for permanent mass storage, 
DRAM technology has provided a low-cost, yet space 
and power-hungry solution for today’s PCs. 

With ETOX process technology, Intel manufactures a 
flash memory cell that is 30% smaller than equivalent 
DRAM cells. Flash memory’s scalability offers a price 
advantage as well, keeping price parity with DRAM, 
and also becoming more attractive as a hard disk 
replacement in portable systems as densities grow and 
costs decline. 

Intel flash memory combines advantages from each of 
these memory technologies. In embedded memory 
applications, flash memory provides higher-performance 
and more flexibility than ROM and EPROM, while 
providing higher density and better cost effectiveness 
than battery-backed SRAM and EEPROM. Moreover, 
the true nonvolatility and low power consumption 
characteristics of flash memory make it a compelling 
alternative to DRAM in many applications. 


ETOX III TECHNOLOGY 

Unlike other approaches to flash memory, Intel ETOX is 
a proven technology. As its name suggest, ETOX (or 
“EPROM tunnel oxide”) technology evolved from 
EPROM. With 95% process compatibility with EPROM, 
ETOX taps experience gained from a mature high- 
volume manufacturing base pioneered by Intel in the 
1970s. 

Representing the third generation of Intel flash memory 
technology, the ETOX III 0.8 1 1 process delivers 100,000 
write cycles per block. This capability significantly 
exceeds the cycling requirements of even the most 
demanding applications. 
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The DD28F032SA contains three types of Status 
Registers to accomplish various functions: 

• A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFile 
memory’s Status Register. This register, when 
used alone, provides a straightforward upgrade 
capability to the DD28F032SA from a 
28F008SA-based design. 

• A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

• 64 Block Status Registers (BSRs) which 
provide block-specific status information such 
as the block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide 
and Word-Wide modes are shown in Figures 4 
and 5. 

The DD28F032SA incorporates an open drain 
RY/BY# output pin. This feature allows the user to 
OR-tie many RY/BY# pins together in a multiple 
memory configuration such as a Resident Flash 
Array. Other configurations of the RY/BY# pin are 
enabled via special CUI commands and are 
described in detail in the 16-Mbit Flash Product 
Family User’s Manual. 

The DD28F032SA also incorporates three chip- 
enable input pins, CE 0 #, CE,# and CE 2 #. The 
active low combination of CE 0 # and CE-,# controls 
the first 28F016SA. The active low combination of 
CE 0 # and CE 2 # controls the second 28F016SA. 


The BYTE# pin allows either x8 or x16 read/writes 
to the DD28F032SA. BYTE# at logic low selects 
8-bit mode with address A 0 selecting between low 
byte and high byte. On the other hand, BYTE# at 
logic high enables 1 6-bit operation with address A-, 
becoming the lowest order address and address 
A 0 is not used (don't care). A device block diagram 
is shown in Figure 1 . 

The DD28F032SA incorporates an Automatic 
Power Saving (APS) feature which substantially 
reduces the active current when the device is in 
static mode of operation (addresses not 
switching). 

A deep power-down mode of operation is invoked 
when the RP# (called PWD# on the 28F008SA) 
pin is driven low. This mode provides additional 
write protection by acting as a device reset pin 
during power transitions. In the Deep Power- 
Down state, the WSM is reset (any current 
operation will abort) and the CSR, GSR and BSR 
registers are cleared. 

A CMOS standby mode of operation is enabled 
when either CE 0 #, or both CE-,# and CE 2 #, 
transition high and RP# stays high with all input 
control pins at CMOS levels. 


2.0 DEVICE PINOUT 

The DD28F032SA Standard 56L-Dual Die TSOP 
Type I pinout configuration is shown in Figure 2. 


ADVANCE INFORMATION 
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2.1 Lead Descriptions 


Symbol 

Type 

Name and Function 

Ao 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when 
device is in x 8 mode. This address is latched in x 8 Data Writes. Not used 
in x16 mode (i.e., the A n input buffer is turned off when BYTE# is high). 

mm 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64-Kbyte block. 
A 6-15 selects 1 of 1024 rows, and A 1-5 selects 16 of 512 columns. These 
addresses are latched during Data Writes. 

Al 6 “ A 20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 64 Erase blocks. These 
addresses are latched during Data Writes, Erase and Lock-Block 
operations. 

DQo - DQ 7 

INPUT/OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write 
cycles. Outputs array, buffer, identifier or status data in the appropriate 
read mode. Floated when the chip is de-selected or the outputs are 
disabled. 

DQs - DQ 15 

INPUT/OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x16 Data-Write operations. 
Outputs array, buffer or identifier data in the appropriate read mode; not 
used for Status register reads. Floated when the chip is de-selected or the 
outputs are disabled. 

O O OO 
m m m m 

O l| 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. CE 0 # or CE-,# enable/disable the first 
28F016SA (16 Mbit No. 1) while CE 0 #, CE 2 # enable/disable the second 
28F016SA (16 Mbit No. 2). CE 0 # active low enables chip operation while 
CE^ or CE 2 # select between the first and second device, respectively. 
CE-i# or CE 2 # must not be active low simultaneously. Reference Table 
3.0. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power- 
Down state. All circuits that burn static power, even those circuits enabled 
in standby mode, are turned off. When returning from Deep Power-Down, 
a recovery time of 400 ns is required to allow these circuits to power-up. 
When RP# goes low, any current or pending WSM operation(s) are 
terminated, and the device is reset. All Status registers return to ready 
(with all status flags cleared). 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when 
low. The outputs float to tri-state off when OE# is high. 

NOTE: 

CEx# overrides OE#, and OE# overrides WE#. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low, and latches 
both address and data (command or array) on its rising edge. 
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6.4 DC Characteristics 


V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 
3/5# = Pin Set High for 3.3V Operations 


Symbol 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

Hi 

Input Leakage 
Current 

1 

■ 

■ 

±2 

MA 

Vcc = Vqc Max, 
V| N = Vcc°rGND 

_ 

Output Leakage 
Current 

1 

■ 

■ 

±20 

MA 

Vcc = Vcc Max, 
Vin = V cc °r GND 

•ccs 

V cc Standby 
Current 

1,5,6 

1 

100 

200 

ma 

Vcc = Vcc Max, 
CE 0 #,CE X #, RP#, = Vcc ± 
0.2V 

BYTE#, WP#, 3/5# = V cc ± 
0.2V or GND ± 0.2V 

■ 

2 

8 

mA 

Vcc= Vcc Max, 

CE 0 #, CE X #, RP# = V| H 
BYTE#, WP#, 3/5# = V| H or 

V| L 

■ 

V cc Deep Power- 
Down Current 

1 

■ 

2 

10 

MA 

RP# = GND ± 0.2V 
BYTE# = V cc ± 0.2V or 
GND ± 0.2V 

bcR 1 

V cc Read Current 

1,4,5, 

6 


25 

30 

mA 

Vcc = Vcc Max 

CMOS: CE 0 #, CE X # = GND 

± 0.2V 

BYTE# = GND ± 0.2V or 
V cc ± 0.2V 

Inputs = GND ± 0.2V or V cc 
± 0.2V 

f = 6.67 MHz, Iqut = 0 mA 

1 

26 

34 

mA 

| 

TTL:CE 0 #,CE x # = V, l , 
BYTE# = V||_ or V| H 
INPUTS = V| L or V| H , 
f = 6.67 MHz, Iqut = 0 mA 

•ccw 

V C c Write Current 

1,7 


8 

12 

mA 

Word/Byte Write in Progress 
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6.1 1 Erase and Word/Byte Write Performance, Cycling Performance and Suspend 
Latency^- 3 ) 

V cc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

ei 


3,26 

Note 6 

[IS 



Page Buffer Word Write 
Time 

H 


6.53 

Note 6 

ps 


WlRH 1 

Word/Byte Write Time 

2 


9 

Note 6 

ps 


WlRH 2 

Block Write Time 

2 


0.6 

2.1 

Sec 

Byte Write Mode 

WlRH 3 

Block Write Time 

2 


0.3 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

2 


0.8 

10 

Sec 



Full Chip Erase Time 

2 


51.2 


Sec 



Erase Suspend Latency 
Time to Read 

■ 


7.0 


MS 



Auto Erase Suspend Latency 
Time to Write 



10.0 


Ms 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



V cc = 5.0V ± 0.5V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

El 


2.76 

Note 6 

ps 



Page Buffer Word Write 
Time 

i 


5.51 

Note 6 

MS 


WlRH 1 

Word Byte/Write Time 

2 


6 

Note 6 

BUI 


Wrh 2 

Block Write Time 

2 


0.4 

2.1 


Byte Write Mode 

WlRH 3 

Block Write Time 

2 


0.2 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

2 


0.6 

10 

Sec 



Full Chip Erase Time 

2 


38.4 


Sec 



Erase Suspend Latency 
Time to Read 

■ 


5.0 


MS 


■ 

Auto Erase Suspend Latency 
Time to Write 



8.0 


MS 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



NOTES: 

1. 25°C, V cc = 3.3V or 5.0V nominal, 10K cycles. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write to Flash (256 bytes or 128 words). 

5. 1 ,000,000 cycle performance assumes the application uses block retirement techniques. 

6. This information will be available in a technical paper. Please call Intel’s Application hotline or your local sales office for 
more information. 
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DEVICE NOMENCLATURE/ORDERING INFORMATION 


D 

D 

2. 

_8_ 

F 

_Q_ 

A 

2 

s 

A 


0 

7 

0 


DUAL DIE ACCESS SPEED (ns) 

70 ns 

100 ns 

NOTES: 

Two valid combinations of speeds exist: 

DD28F032SA-070, DD28F032SA-080, DD28F032SA-120 
or 

DD28F032SA-1 00, DD28F032SA-150 


Option 

Order Code 

Valid Combinations 

Vcc = 3.3V 
± 0.3V, 50 pF 

Vcc = 5.0V 
± 5%, 30 pF 

Vcc = 5.0V 
±10%, 100 pF 

1 

DD28F032SA 070 

DD28F032SA-1 50 


DD28F032SA-080 

2 

DD28F032SA 100 

DD28F032SA-1 50 




ADDITIONAL INFORMATION 


Order 

Number 

Item 

297372 

1 6-Mbit Flash Product Family User’s Manual 

290489 

28F016SA 16-Mbit FlashFile™ Memory Data Sheet 

290528 

28F016SV FlashFile™ Memory Data Sheet 

290429 

28F008SA Data Sheet 

292159 

AP-607 “Multi-Site Layout Planning w/lntel’s FlashFile™ Components Including ROM 
Compatibility” 

292144 

AP 393 “28F016SV Compatibility with 28F016SA” 

292127 

AP 378 “System Optimization Using the Enhanced Features of the 28F016SA” 

292126 

AP 377 “28F016SA Software Drivers” 

292124 

AP 375 “Upgrade Considerations from the 28F008SA to the 28F016SA” 

292123 

AP 374 “Flash Memory Write Protection Techniques” 

292092 

AP 357 “Power Supply Solutions For Flash Memory” 

294016 

ER 33 “ETOX™ Flash Memory Technology — Insight to Intel's Fourth Generation 
Process Innovation” 

297508 

FLASH Builder Design Resource Tool 

297534 

Small and Low-Cost Power Supply Solution for Intel’s Flash Memory Products 
(Technical Paper) 


Please check with Intel Literature for availability. 
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DATASHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Never Published 

003 

Full Datasheet with Specifications 
CE 0 #, CEi# control 28F016SA No. 1 
CE 0 #, CE 2 # control 28F016SA No. 2 

004 

Lead Descriptions: Block Select Addresses: Select 1 
of 64 Erase Blocks 

DC Characteristics (3.3V Vcc): Iccr 1 (TTL): 

BYTE# = Vil or Vih 

Full Chip Erase Time (3.3V Vcc) = 51 .2 sec typ 
Full Chip Erase Time (5.0V Vcc) = 38.4 sec typ 
Minor cosmetic changes 
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28F016SV, 16-Mbit 
FlashFile™ Memory Datasheet 




28F016SV FlashFile™ MEMORY 



2.1 Lead Descriptions (Continued) 


Symbol 

Type 

Name and Function 

RY/BY# 

OPEN DRAIN 
OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it 
indicates that the WSM is busy performing an operation. RY/BY# floating 
indicates that the WSM is ready for new operations (or WSM has 
completed all pending operations), or Erase is Suspended, or the device 
is in deep power-down mode. This output is always active (i.e., not floated 
to tri-state off when OE# or CE 0 #, CE-,# are high), except if a RY/BY# Pin 
Disable command is issued. 

WP# 

INPUT 

WRITE PROTECT: Erase blocks can be locked by writing a nonvolatile 
lock-bit for each block. When WP# is low, those locked blocks as 
reflected by the Block- Lock Status bits (BSR.6), are protected from 
inadvertent Data Writes or Erases. When WP# is high, all blocks can be 
written or erased regardless of the state of the lock-bits. The WP# input 
buffer is disabled when RP# transitions low (deep power-down mode). 

BYTE# 

INPUT 

BYTE ENABLE: BYTE# low places device in x8 mode. All data is then 
input or output on DQo_ 7 , and DQ8_ 15 float. Address A 0 selects between 
the high and low byte. BYTE# high places the device in x16 mode, and 
turns off the A 0 input buffer. Address A 1t then becomes the lowest order 
address. 

Vp P 

SUPPLY 

WRITE/ERASE POWER SUPPLY (12.0V ± 0.6V, 5.0V ± 0.5V) : For 

erasing memory array blocks or writing words/bytes/pages into the flash 
array. V PP = 5.0V ± 0.5V eliminates the need for a 12V converter, while 
connection to 12.0V ± 0.6V maximizes Write/Erase Performance. 

NOTE: 

Successful completion of write and erase attempts is inhibited with V PP at 
or below 1 .5V. Write and Erase attempts with V PP between 1 .5V and 
4.5V, between 5.5V and 1 1 .4V, and above 12.6V produce spurious 
results and should not be attempted. 

Vcc 

SUPPLY 

DEVICE POWER SUPPLY (3.3V ± 0.3V, 5.0V ± 0.5V, 5.0 ± 0.25V): 

Internal detection configures the device for 3.3V or 5.0V operation. To 
switch 3.3V to 5.0V (or vice versa), first ramp V cc down to GND, and then 
power to the new V cc voltage. 

Do not leave any power pins floating. 

GND 

SUPPLY 

GROUND FOR ALL INTERNAL CIRCUITRY: 

Do not leave any ground pins floating. 

NC 


NO CONNECT: 

Lead may be driven or left floating. 
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4.4 28F016SV — Performance Enhancement Command Bus Definitions 


First Bus Cycle 


Second Bus Cycle 


Third Bus Cycle 


Read Extended 
Status Register 



Page Buffer Swap 


Read Page Buffer 


Single Load to 
Page Buffer 


Sequential Load to 
Page Buffer 

x8 

4,6,10 

Write 

X 

xxEOH 

Write 

X 

BCL 

Write 

X 

BCH 


x16 

4,5,6,10 

Write 

X 

xxEOH 

Write 

X 

WCL 

Write 

X 

WCH 

Page Buffer Write 
to Flash 

x8 

3,4,9,10 

Write 

X 

xxOCH 

Write 

AO 

BC(L,H) 

Write 

WA 

BC(H,L) 


x16 

4,5,10 

Write 

D 

xxOCH 

Write 

X 

WCL 

Write 

WA 

WCH 

Two-Byte Write 

x8 

3 

Write 

X 

xxFBH 

Write 

AO 

WD(L,H) 

Write 

WA 

WD(H,L) 



ADDRESS 

BA = Block Address 
PA = Page Buffer Address 
RA = Extended Register Address 
WA = Write Address 
X = Don’t Care 


DATA 

AD = Array Data 
PD = Page Buffer Data 
BSRD = BSR Data 
GSRD = GSR Data 


WC (L,H) = Word Count (Low, High) 
BC (L,H) = Byte Count (Low, High) 
WD (L,H) = Write Data (Low, High) 
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NOTES: 

1 . RA can be the GSR address or any BSR address. See Figures 4 and 5 for Extended Status Register memory maps. 

2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 

3. A 0 is automatically complemented to load second byte of data. BYTE# must be at V ]L . 

A 0 value determines which WD/BC is supplied first: A 0 = 0 looks at the WDL/BCL, A 0 = 1 looks at the WDH/BCH. 

4. BCH/WCH must be at 00H for this product because of the 256-byte (128-word) Page Buffer size, and to avoid writing the 
Page Buffer contents to more than one 256-byte segment within an array block. They are simply shown for future Page 
Buffer expandability. 

5. In x16 mode, only the lower byte DQ 0 _ 7 is used for WCL and WCH. The upper byte DQ 8 . 15 is a don’t care. 

6. PA and PD (whose count is given in cycles 2 and 3) are supplied starting in the fourth cycle, which is not shown. 

7. This command allows the user to swap between available Page Buffers (0 or 1). 

8. These commands reconfigure RY/BY# output to one of three pulse-modes or enable and disable the RY/BY# function. 

9. Write address, WA, is the Destination address in the flash array which must match the Source address in the Page Buffer. 
Refer to the 16-Mbit Flash Product Family User’s Manual. 

10. BCL = 00H corresponds to a byte count of 1 . Similarly, WCL = 00H corresponds to a word count of 1 . 

1 1. After writing the Upload Device Information command and the Confirm command, the following information is output at 
Page Buffer addresses specified below: 


Address 

06H, 07H (Byte Mode) 

03H (Word Mode) 

1EH (Byte Mode) 

OFH (DQ 0 _ 7 )(Word Mode) 
1FH (Byte Mode) 

OFH (DQg_ 15 )(Word Mode) 


Information 

Device Revision Number 
Device Revision Number 
Device Configuration Code 
Device Configuration Code 
Device Proliferation Code (01H) 
Device Proliferation Code (01 H) 


A page buffer swap followed by a page buffer read sequence is necessary to access this information. The contents of all 
other Page Buffer locations, after the Upload Device Information command is written, are reserved for future implementation 
by Intel Corporation. See Section 4.8 for a description of the Device Configuration Code. This code also corresponds to 
data written to the 28F016SV after writing the RY/BY# Reconfiguration command. 

12. To ensure that the 28F016SV’s power consuption during Sleep Mode reaches the Deep Power-Down current level, the 
system also needs to de-select the chip by taking either or both CE 0 # or CE,# high. 

13. The upper byte of the data bus (Ds-is) during command writes is a “Don’t Care” in x16 operation of the device. 
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5.0 ELECTRICAL SPECIFICATIONS 

5.1 Absolute Maximum Ratings* 

Temperature Under Bias 0°C to +80°C 

Storage Temperature -65°C to +125°C 


NOTICE: This datasheet contains information on 
products in the sampling and initial production 
phases of development. The specifications are 
subject to change without notice. Verify with your 
local Intel Sales office that you have the latest 

datasheet before finalizing a design. 

*WARNING: Stressing the device beyond the 
“Absolute Maximum Ratings” may cause 
permanent damage. These are stress ratings 
only. Operation beyond the “Operating 
Conditions” is not recommended and extended 
exposure beyond the "Operating Conditions" may 
affect device reliability. 


V cc = 3.3V ± 0,3V Systems 


Sym 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

Q 

Ambient Temperature 

o 

o 

> 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


Vpp 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CC ,V PP ) with 
Respect to GND 

2,5 

-0.5 

Vcc 
+ 0.5 

V 


D 

Current into any Non-Supply Pin 

5 


±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



V cc = 5.0V ± 0.5V, 5.0V ± 0.25V Systems( 6 ) 


Sym 

Parameter 

Notes 

Min 

Max 

Units 

Test Conditions 

Ta 

Operating Temperature, Commercial 

1 

0 

70 

B 

Ambient Temperature 

V CC 

V cc with Respect to GND 

2 

-0.2 

7.0 

V 


a 

CL 

> 

Vpp Supply Voltage with Respect to GND 

2,3 

-0.2 

14.0 

V 


V 

Voltage on any Pin (except V CC ,V PP ) with 
Respect to GND 

2,5 

-2.0 

7.0 

V 


m 

Current into any Non-Supply Pin 

5 


±30 

mA 


•out 

Output Short Circuit Current 

4 


100 

mA 



NOTES: 

1 . Operating temperature is for commercial product defined by this specification. 

2. Minimum DC voltage is -0.5V on input/output pins. During transitions, this level may undershoot to -2.0V for periods <20 ns. 
Maximum DC voltage on input/output pins is V cc + 0.5V which, during transitions, may overshoot to V cc + 2.0V for periods 
<20 ns. 

3. Maximum DC voltage on V pp may overshoot to + 14.0V for periods <20 ns. 

4. Output shorted for no more than one second. No more than one output shorted at a time. 

5. This specification also applies to pins marked “NC.” 

6. 5% V cc specifications refer to the 28F01 6SV-065 and 28F01 6SV-070 in its high speed test configuration. 
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5.3 DC Characteristics (Continued) 
V cc = 3.3V ± 0.3V, T a = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

■ 

Vcc Write Current 

1,6 

■ 

8 

12 

mA 

Word/Byte Write in Progress 
Vpp = 12.0V ±5% 

■ 

8 

17 

mA 

Word/Byte Write in Progress 
Vpp = 5.0V ±10% 

^CCE 

V cc Block Erase 
Current 

1,6 

■ 

6 

12 

mA 

Block Erase in Progress 
Vp P = 12.0V ±5% 

■ 

9 

17 

mA 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

•CCES 

V C c Erase 
Suspend Current 

1,2 

■ 

1 

■ 

mA 

CE 0 #, CE 1 # = V ih 
B lock Erase Suspended 

Ws 

•PPR 

Vp P Standby/Read 
Current 

1 


±1 

±10 

PA 

Vp P <V cc 


30 

200 

PA 

Vpp > v cc 

m 

V PP Deep Power- 
Down Current 

1 


0.2 

5 

PA 

RP# = GND ± 0.2V 


V pp Write Current 

1,6 


10 

15 

mA 

Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 


15 

25 

mA 

Vpp = 5.0V ±10% 

Word/Byte Write in Progress 


V PP Erase Current 

1,6 


■ 

10 

mA 

Vpp = 12.0V ±5% 

Block Erase in Progress 


14 

20 

mA 

Vpp = 5.0V ±10% 

Block Erase in Progress 

m 

Vpp Erase 
Suspend Current 

1 


30 

50 

PA 

Vpp = Vpp H1 or V PPH2 , Block 
Erase Suspended ; 

V,L 

Input Low Voltage 

6 

-0.3 


0.8 

V 


V IH 

Input High Voltage 

6 

2.0 

■ 

Vcc 

+ 

0.3 

V 


_i 

O 

> 

Output Low 
Voltage 

6 

■ 

■ 

0.4 

V 

BflSEuSHBHHH 
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5.4 DC Characteristics (Continued) 

V cc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 

Iccw 

Vcc Write Current 

1,6 

■ 

25 

35 

mA 

Word/Byte in Progress 
Vpp = 12.0V ±5% 




■ 

25 

40 

mA 

Word/Byte in Progress 
Vpp = 5.0V ±10% 

ICCE 

Vcc Block Erase 
Current 

1,6 

■ 

18 

25 

mA 

Block Erase in Progress 
Vpp = 12.0V ±5% 




■ 

20 

30 

mA 

Block Erase in Progress 
Vpp = 5.0V ±10% 

ICCES 

Vcc Erase 
Suspend Current 

1,2 

■ 

2 

■ 

mA 

ce 0 #,ce 1 # = v ih 

Block Erase Suspended 

*PPS 

V PP Standby/Read 

1 


±1 

±10 

PA 

Vpp < Vcc 

•PPR 

Current 



30 

200 

pA 

8 

> 

A 

Q. 

CL 

> 

m 

V PP Deep Power- 
Down Current 

1 


0.2 

5 

pA 

RP# = GND ± 0.2V 

m 

V pp Write Current 

1,6 


■ 

12 

mA 

Vpp = 12.0V ± 5% 
Word/Byte Write in Progress 

m 




17 

22 

mA 

Vpp = 5.0V ± 10% 

Word/Byte Write in Progress 

■ 

V PP Block Erase 
Current 

1,6 


5 

10 

mA 

Vpp = 12.0V ± 5% 

Block Erase in Progress 

■ 




16 

20 

mA 

Vpp = 5.0V ± 10% 

Block Erase in Progress 

B 

Vpp Erase 
Suspend Current 

1 


30 

50 

pA 

Vpp = Vpp H1 or Vpp H 2 , Block 
Erase Suspended 

V,L 

Input Low Voltage 

6 

-0.5 


0.8 

V 


V,H 

Input High Voltage 

6 

2.0 

■ 

v cc 

+0.5 

V 
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5.4 DC Characteristics (Continued) 

V cc = 5.0V ± 0.5V, 5.0V ± 0.25V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 



Max 

Units 

Test Conditions 

o 

> 

Output Low 
Voltage 

6 

■ 

■ 

0.45 

V 

Vcc = Vcc Min 
l OL = 5.8 mA 

o 

> 

Output High 
Voltage 

6 


■ 

■ 

V 

I 0 h = “2.5 mA 
Vcc = Vcc Min 

CM 

o 

> 


6 

v cc 

-0.4 

■ 

■ 


ioH = -100 pA 
Vcc = Vcc Min 

VpPLK 

Vpp Write/Erase 
Lock Voltage 

3,6 

0.0 

■ 

1.5 

V 


V PPH1 

Vpp during 

Write/Erase 

Operations 


■ 

5.0 

5.5 

V 


VppH2 

Vpp during 

Write/Erase 

Operations 


11.4 

12.0 

12.6 

V 


V LKO 

V cc Write/Erase 
Lock Voltage 


2.0 

■ 

■ 

V 



NOTES: 


1. All currents are in RMS unless otherwise noted. Typical values at V cc = 5.0V, V pp = 12.0V or 5.0V, T = 25°C. These 
currents are valid for all product versions (package and speeds) and are specified for a CMOS rise/fall time (10% to 90%) of 
<5 ns and a TTL rise/fall time of <10 ns. 

2. I CCES is specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum of 
Icces anc * •ccr. 

3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when V pp < V PPLK and not guaranteed in the 
ranges between V PPLK (max) and V PPH1 (min), between V PPH1 (max) and V PPH2 (min) and above V PPH2 (max). 

4. Automatic Power Saving (APS) reduces l CCR to 1 mA typical in Static operation. 

5. CMOS Inputs are either V cc ± 0.2V or GND ± 0.2V. TTL Inputs are either V )L or V iH . 

6. Sampled, not 100% tested. Guaranteed by design. 
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DEEP WRITE DATA-WRITE OR 



ADDRESSES (A) 
NOTE 2 V IL 



I nHH) 

ngs 

hiIIH 


plllll 


NOTES: 

1 . This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CE 0 # or CE^ going low or the first of CE 0 # or CE^ going high. 

5. RP# low transition is only to show t RHPL ; not valid for above Read and Write cycles. 

6. V pp voltage during Write/Erase operations valid at both 12.0V and 5.0V. 

7. Vpp voltage equal to or below V PPLK provides complete flash memory array protection. 


Figure 15. AC Waveforms for Command Write Operations 


I ADVANCE INFORMATION 





intel 


28F016SV FlashFile™ MEMORY 


WRIT? VALID ADDRESS 
8c DATA (DATA-WRITE) OR 
ERASE CONFIRM COMMAND 




1 . This address string depicts Data Write/Erase cycles with corresponding verification via ESRD. 

2. This address string depicts Data Write/Erase cycles with corresponding verification via CSRD. 

3. This cycle is invalid when using CSRD for verification during Data Write/Erase operations. 

4. CEx# is defined as the latter of CE 0 # or CE.,# going low or the first of CE 0 # or CE^ going high. 

5. RP# low transition is only to show t RHPL ; not valid for above Read and Write cycles. 

6. V pp voltage during Write/Erase operations valid at both 12.0V and 5.0V. 

7. Vpp voltage equal to or below V PPLK provides complete flash memory array protection. 


Figure 16. Alternate AC Waveforms for Command Write Operations 
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5.12 Erase and Word/Byte Write Performance^) 

V cc = 3.3V ± 0.3V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 



V cc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 
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5.12 Erase and Word/Byte Write Performance^’ 5 ) (Continued) 
V cc = 5.0V ± 0.5V, 5.0V ± 0.25V, V PP = 5.0V ± 0.5V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

2,6 

TBD 

8.0 

TBD 




Page Buffer Word Write Time 

2,6 


16.0 

TBD 

ps 


twHRH 1A 

Byte Write Time 

2 


20 

TBD 

ps 


*WHRH 1B 

Word Write Time 

2 

TBD 

25 

TBD 

ps 


■19 

Block Write Time 

2 

TBD 

1.4 

TBD 

sec 

Byte Write Mode 

twHRH 3 

Block Write Time 

2 

TBD 

0.85 

TBD 

sec 

Word Write Mode 


Block Erase Time 

2 

TBD 

1.0 

TBD 

sec 



Full Chip Erase Time 

2 

TBD 

32.0 

TBD 

sec 



Erase Suspend Latency Time 
to Read 

■ 

1.0 

9 

55 

ps 



Auto Erase Suspend Latency 
Time to Write 


3.0 

12 

60 

ps 



V cc = 5.0V ± 0.5V, 5.0V ± 0.25V, V PP = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

TypO) 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

2,6 

TBD 

2.1 

TBD 

ps 



Page Buffer Word Write Time 

2,6 

TBD 

4.1 

TBD 

ps 


twHRH 1 

Word/Byte Write Time 

2 


6 

TBD 

ps 



Block Write Time 

2 

TBD 

0.4 

2.1 

sec 

Byte Write Mode 


Block Write Time 

2 

TBD 

0.2 

1.0 

sec 

Word Write Mode 


Block Erase Time 

2 

0.3 

0.6 

10 

sec 



Full Chip Erase Time 

2 

TBD 

19.2 

TBD 

sec 



Erase Suspend Latency Time 
to Read 

■ 

1.0 

■ 

40 

ps 



Auto Erase Suspend Latency 
Time to Write 


3.0 

10 

45 

ps 



NOTES: 

1. 25°C, and nominal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. Specification applies to interrupt latency for Single Block Erase. Suspend latency for Erase All Unlocked Block operation 
extends the maximum latency time to 270 ps. 

5. Sampled, but not 100% tested. Guaranteed by design. 

6. Assumes using the full Page Buffer to write to flash (256 Bytes or 128 Words). 
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intel* 


The 28F016SA contains three types of Status 
Registers to accomplish various functions: 

® A Compatible Status Register (CSR) which is 
100% compatible with the 28F008SA FlashFiie 
memory’s Status Register. This register, when 
used alone, provides a straightforward 
upgrade capability to the 28F016SA from a 
28F008SA-based design. 

® A Global Status Register (GSR) which informs 
the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 

® 32 Block Status Registers (BSRs) which 

provide block-specific status information such 
as the block lock-bit status. 

The GSR and BSR memory maps for Byte-Wide 
and Word-Wide modes are shown in Figures 5 
and 6. 

The 28F016SA incorporates an open drain 
RY/BY# output pin. This feature allows the user to 
OR-tie many RY/BY# pins together in a multiple 
memory configuration such as a Resident Flash 
Array. 

Other configurations of the RY/BY# pin are 
enabled via special CUI commands and are 
described in detail in the 16-Mbit Flash Product 
Family User’s Manual. 

The 28F016SA also incorporates a dual chip- 
enable function with two input pins, CEo# and 
CEi#. These pins have exactly the same 
functionality as the regular chip-enable pin CE# on 
the 28F008SA. For minimum chip designs, CEi# 
may be tied to ground and use CEo# as the chip 
enable input. The 28F016SA uses the logical 
combination of these two signals to enable or 
disable the entire chip. Both CEo# and CEi# must 
be active low to enable the device and, if either 
one becomes inactive, the chip will be disabled. 
This feature, along with the open drain RY/BY# 
pin, allows the system designer to reduce the 
number of control pins used in a large array of 
1 6-Mbit devices. 


The BYTE# pin allows either x8 or xl 6 read/writes 
to the 28F016SA. BYTE# at logic low selects 8-bit 
mode with address Ao selecting between low byte 
and high byte. On the other hand, BYTE# at logic 
high enables 16-bit operation with address Ai 
becoming the lowest order address and address 
Ao is not used (don’t care). A device block diagram 
is shown in Figure 1. 

The 28F01 6SA is specified for a maximum access 
time of 70 ns (tAcc) at 5.0V operation (4.75V to 
5.25V) over the commercial temperature range (0° 
C to +70°C). A corresponding maximum access 
time of 120 ns at 3.3V (3.0V to 3.6V and 0°C to 
+70°C) is achieved for reduced power 
consumption applications. 

The 28F016SA incorporates an Automatic Power 
Saving (APS) feature which substantially reduces 
the active current when the device is in static 
mode of operation (addresses not switching). 

In APS mode, the typical Ice current is 1 mA at 
5.0V (0.8 mA at 3.3V). 

A deep power-down mode o f operation is invoked 
when the RP# (called PWD on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 1.0 pA, typically, and 
provides additional write protection by acting as a 
device reset pin during power transitions. A reset 
time of 400 ns is required from RP# switching high 
until outputs are again valid. In the Deep Power- 
Down state, the WSM is reset (any current 
operation will abort) and the CSR, GSR and BSR 
registers are cleared. 

A CMOS standby mode of operation is enabled 
when either CEo# or CEi# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
Ice standby current of 50 pA. 


2.0 DEVICE PINOUT 

The 28F016SA 56 lead TSOP Type I pinout 
configuration is shown in Figure 2. The 56 lead 
SSOP pinout configuration is shown in Figure 3. 
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5.1 1 Erase and Word/Byte Write Performance, Cycling Performance and 

Suspend Latency^- 3 ) 

Vcc = 3.3V ± 0.3V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

1,2,4 


3.26 

Note 6 

MS 



Page Buffer Word Write Time 

1,2,4 


6.53 

Note 6 

ps 


tWHRHl 

Word/Byte Write Time 

1,2 


9 

Note 6 

ps 


tWHRH2 

Block Write Time 

1,2 


0.6 

2.1 

Sec 

Byte Write Mode 

tWHRH3 

Block Write Time 

1,2 


0.3 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

1,2 


0.8 

10 

Sec 



Full Chip Erase Time 

1,2 


25.6 


Sec 


■ 

Erase Suspend Latency Time 
to Read 

Mi 


7.0 


Ms 


■ 

Auto Erase Suspend Latency 
Time to Write 



10.0 


MS 



Erase Cycles 

5 

100,000 

1 ,000,000 


Cycles 



Vcc = 5.0V ± 0.5V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Notes 

Min 

Typ 

Max 

Units 

Test Conditions 


Page Buffer Byte Write Time 

1,2,4 


2.76 

Note 6 

ps 



Page Buffer Word Write Time 

1,2,4 


5.51 

Note 6 

MS 


tWHRHl 

Word Byte/Write Time 

1,2 


6 

Note 6 

MS 


tWHRH2 

Block Write Time 

1,2 


0.4 

2.1 

Sec 

Byte Write Mode 

tWHRH3 

Block Write Time 

1,2 


0.2 

1.0 

Sec 

Word Write Mode 


Block Erase Time 

1,2 


0.6 

10 

Sec 



Full Chip Erase Time 

1,2 


19.2 


Sec 


■ 

Erase Suspend Latency Time 
to Read 



5.0 

■ 

Ms 



Auto Erase Suspend Latency 
Time to Write 

■ 


8.0 

|| 

MS 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



NOTES: 

1. 25°C, Vpp = 12.0V nominal, 10K cycles. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write Flash (256 bytes or 128 words). 

5. Typical 1 ,000,000 cycle performance assumes the application uses block retirement techniques. 

6. This information will be available in a technical paper. Please call Intel’s Application Hotline or your local Intel Sales office 
for more information. 
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9.0 DEVICE NOMENCLATURE AND ORDERING INFORMATION 


D 


2 

8 

F 




S 


B 


7 

0 


DA = COMMERCIAL TEMPERATURE 
56-LEAD SSOP 

E = COMMERCIAL TEMPERATURE 
56-LEAD TSOP 


Option 

Order Code 

Valid Combinations 

V C c = 3.3V ± 0.3V, 
50 pF Load 

Vcc = 5.0V ± 10%, 
100 pF Load 

Vcc = 5.0V ± 5%, 
30 pF Load 

1 

E28F016SA-070 

E28F016SA-120 

E28F016SA-080 

E28F016SA-070 

2 

E28F016SA-100 

E28F016SA-150 

E28F016SA-100 


3 

DA28F01 6SA-070 

DA28F016SA-120 

DA28F01 6SA-080 

DA28F01 6SA-070 

4 

DA28F01 6SA-1 00 

DA28F016SA-150 

DA28F01 6SA-1 00 



9.1 References 


Order Number 

Document/Tool 

297372 

16-Mbit Flash Product Family User’s Manuall 

290490 

DD28F032SA 32-Mbit FlashFile™ Memory Datasheet 

290528 

28F016SV FlashFile™ Memory Datasheet 

290435 

28F008SA 8-Mbit FlashFile™ Memory Datasheet 

292159 

AP-607 Multi-Site Layout Planning with Intel’s Flash File™ Components 

292144 

AP-393 28F016SV Compatibility with 28F016SA 

292127 

AP-378 System Optimization Using the Enhanced Features of the 28F016SA 

292126 

AP-377 28F016SA Software Drivers 

292124 

AP-375 Upgrade Considerations from the 28F008SA to the 28F016SA 

292123 

AP-374 Flash Memory Write Protection Techniques 

292092 

AP-357 Power Supply Solutions for Flash Memory 


ACCESS SPEED 

70 ns 
100 ns 
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Order Number 

Document/Tool 

294016 

ER-33 ETOX™ Flash Memory Technology - Insight to Intel’s Fourth Generation 
Process Innovation 

297534 

Small and Low-Cost Power Supply solution for Intel’s Flash Memory Products 
(Technical Paper) 

297508 

FLASHBuilder Design Resource Tool 


9.2 Revision History 


Number 

Description 

001 

Original Version 

002 

— Added 56 Lead SSOP Package 

—Separated AC Reading Timing Specs tAVEL, tAVGL for Extended Status Register 
Reads 

— Modified DEVICE NOMENCLATURE 

— Added ORDERING INFORMATION 

— Added Page Buffer Typical Write Performance numbers 

— Added Typical Erase Suspend Latencies 

— For Iccd (Deep Power-Down current, BYTE# must be at CMOS levels) 

— Added SSOP package mechanical specifications 

003 

— Renamed referenced “28F016SA User’s Manual” as “16-Mbit Flash Product Family 
User’s Manual 

— Section 5.1 1 : Renamed specification “Erase Suspend Latency Time to Write” as “Auto 
Erase Suspend Latency Time to Write” 

— Minor cosmetic changes 
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2.1 Lead Descriptions 

Lead Descriptions 


Symbol 

Type 

Name and Function 

Ao 

INPUT 

BYTE-SELECT ADDRESS: Selects between high and low byte when device is 
in x8 mode. This address is latched in x8 Data Writes. Not used in x 16 mode 
(i.e., the A n input buffer is turned off when BYTE# is high). 

A1-A15 

INPUT 

WORD-SELECT ADDRESSES: Select a word within one 64 -Kbyte block. A&-15 
selects 1 of 1024 rows, and Ai_s selects 16 of 512 columns. These addresses 
are latched during Data Writes. 

A16-A20 

INPUT 

BLOCK-SELECT ADDRESSES: Select 1 of 32 Erase blocks. These addresses 
are latched during Data Writes, Erase and Lock-Block operations. 

DQ0--DQ7 

INPUT/ 

OUTPUT 

LOW-BYTE DATA BUS: Inputs data and commands during CUI write cycles. 
Outputs array, buffer, identifier or status data in the appropriate read mode. 
Floated when the chip is de-selected or the outputs are disabled. 

DQ8-DQ15 

INPUT/ 

OUTPUT 

HIGH-BYTE DATA BUS: Inputs data during x 16 Data-Write operations. 
Outputs array, buffer or identifier data in the appropriate read mode; not used 
for Status Register reads. Floated when the chip is de-selected or the outputs 
are disabled. 

CE 0 #, ce,# 

INPUT 

CHIP ENABLE INPUTS: Activate the device’s control logic, input buffers, 
decoders and sense amplifiers. With either CE 0 # or CE-|# high, the device is de- 
selected and power consumption reduces to standby levels upon completion of 
any current Data-Write or Erase operations. Both CE 0 #, CE-,# must be low to 
select the device. 

All timing specifications are the same for both signals. Device Selection occurs 
with the latter falling edge of CE 0 # or CE^. The first rising edge of CE 0 # or 
CE-,# disables the device. 

RP# 

INPUT 

RESET/POWER-DOWN: RP# low places the device in a Deep Power-Down 
state. All circuits that burn static power, even those circuits enabled in standby 
mode, are turned off. When returning from Deep Power-Down, a recovery time 
of 550 ns at 5.0V V cc is required to allow these circuits to power-up. 

When RP# goes low, any current or pending WSM operation(s) are terminated, 
and the device is reset. All Status Registers return to ready (with all status flags 
cleared). 

Exit from Deep Power-Down places the device in read array mode. 

OE# 

INPUT 

OUTPUT ENABLE: Gates device data through the output buffers when low. 
The outputs float to tri-state off when OE# is high. 

NOTE: 

CEx# overrides OE#, and OE# overrides WE#. 

WE# 

INPUT 

WRITE ENABLE: Controls access to the CUI, Page Buffers, Data Queue 
Registers and Address Queue Latches. WE# is active low, and latches both 
address and data (command or array) on its rising edge. 

Page Buffer addresses are latched on the falling edge of WE#. 

RY/BY# 

OPEN 

DRAIN 

OUTPUT 

READY/BUSY: Indicates status of the internal WSM. When low, it indicates that 
the WSM is busy performing an operation. RY/BY# high indicates that the WSM 
is ready for new operations (or WSM has completed all pending operations), or 
Erase is Suspended, or the device is in deep power-down mode. This output is 
always active (i.e., not floated to tri-state off when OE# or CE 0 #, CE^ are 
high), except if a RY/BY# Pin Disable command is issued. 
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Figure 14. Page Buffer Write Timing Waveforms 
(Loading Data to the Page Buffer) 


5.11 Erase and Word/Byte Write Performance, Cycling Performance and 
Suspend Latency^. 3) : EXTENDED TEMPERATURE OPERATION 

V cc = 3.3V ± 0.3V, V PP = 12.0V ± 0.6V, T A = -40°C to +85°C 
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5.11 Erase and Word/Byte Write Performance 0> 3 ) (Continued): EXTENDED 
TEMPERATURE OPERATION 

V cc = 5.0V ± 0.5V, V PP = 12.0V ± 0.6V, T A = -40°C to +85°C 


Sym 

Parameter 

Notes 

Min 

Typf 1 ) 

Max 

Units 

Test Conditions 

■ 

Page Buffer Byte Write Time 

1,2,4 


2.76 

Note 

6 

Ms 


■ 

Page Buffer Word Write Time 

1,2,4 


5.51 

Note 

6 

MS 


WM 

Word Byte/Write Time 

wa 


6 

Note 

MS 


twHRH 

Block Write Time 

1,2 


0.4 

2.1 

sec 

Byte Write Mode 

HH 

Block Write Time 

1,2 


0.2 

1.0 

sec 

Word Write Mode 


Block Erase Time 

1,2 


1.2 

10 

sec 



Full Chip Erase Time 

1,2 


41.6 


sec 


■ 

Erase Suspend Latency 
Time to Read 

■ 


5.0 

■ 

Ms 


■ 

Erase Suspend Latency 
Time to Write 

■ 


8.0 

■ 

Ms 



Erase Cycles 

5 

100,000 

1,000,000 


Cycles 



NOTES: 

1 . 25°C, and normal voltages. 

2. Excludes system-level overhead. 

3. These performance numbers are valid for all speed versions. 

4. This assumes using the full Page Buffer to Write to Flash (256 bytes or 128 words). 

5. Typical 1 ,000,000 cycles performance assumes the application uses block retirement techniques. 

6. This information will be available in a technical paper. Pleas call Intel’s application Hotline or your local sales office for 
more information. 
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DEVICE NOMENCLATURE 


D 

T 

2 

8 

F 

0 

1 

6 

CO 

A 

— 

1 

0 

0 


DT = EXTENDED 
56-LEAD SSOP 


ACCESS SPEED 
1 00 ns (5V), 150 ns 


290541-16 


Valid Combinations 


Order Code 

Vcc = 3.3V ± 0.3V 

Vcc = 5.0V ±10% 

DT28F01 6SA-1 00 

DT28F01 6SA-1 50 

DT28F016SA-100 


ADDITIONAL INFORMATION 



Item 

Order 

Number 


16-Mbit Flash Product Family User’s Manual 

297372 


Commercial Temperature 28F016SA 16-Mbit FlashFile™ Memory 
Datasheet 

290489 


Commercial Temperature 28F016SV SmartVoltage 16-Mbit FlashFile™ 
Memory Datasheet 

290528 


28F008SA 8 Mbit FlashFile™ Memory Datasheet 

290429 

AP 393 

28F016SV Compatibility with 28F016SA 

292144 

AP 378 

System Optimization Using the Enhanced Features of the 28F016SA 

292127 

AP 377 

28F016SA Software Drivers 

292126 

AP 375 

Upgrade Considerations from the 28F008SA to the 28F016SA 

292124 

AP-357 

Power Supply Solutions for Flash Memory 

292092 

ER 33 

ETOX™ Flash Memory Technology — Insight to Intel's Fourth Generation 
Process Innovation 

294016 


Please check with Intel Literature for availability. 
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DATA SHEET REVISION HISTORY 


Number 

Description 

001 

Original Version 

002 

Renamed referenced “28F016SA User’s Manual” as 16-Mbit Product Family User’s 
Manual” 

Section 5.1 1: Renamed specification “Erase Suspend Latency Time to Write” as “Auto 
Erase Suspend Latency Time to Write” 

Section 2.1 RP# recovery time is 550 ns 

Minor cosmetic changes 
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4-Mbit Smart Voltage 
Boot Block Flash Memory 
Family Datasheet 




irrtel. 

Refer to the DC Characteristics Table, Section 4.2 
(commercial temperature) and Section 5.2 
(extended temperature), for complete current and 
voltage specifications. Refer to the AC 
Characteristics Table, Section 4.3 (commercial 
temperature) and Section 5.3 (extended 
temperature), for read, write and erase performance 
specifications. 


1 .3 Applications 

The 4-Mbit boot block flash memory family 
combines high-density, low-power, high- 

performance, cost-effective flash memories with 
blocking and hardware protection capabilities. Their 
flexibility and versatility reduce costs throughout the 
product life cycle. Flash memory is ideal for Just-In- 
Time production flow, reducing system inventory 
and costs, and eliminating component handling 
during the production phase. 

When your product is in the end-user’s hands, and 
updates or feature enhancements become 
necessary, flash memory reduces the update costs 
by allowing user-performed code changes instead 
of costly product returns or technician calls. 

The 4-Mbit boot block flash memory family provides 
full-function, blocked flash memories suitable for a 
wide range of applications. These applications 
include extended PC BIOS and ROM-able 
applications storage, digital cellular phone program 
and data storage, telecommunication boot/firmware, 
printer firmware/font storage and various other 
embedded applications where program and data 
storage are required. 

Reprogrammable systems such as personal 
computers, are ideal applications for the 4-Mbit 
flash memory products. Increasing software 
sophistication greatens the probability that a code 


4-MBIT SmartVoltage BOOT BLOCK FAMILY 

update will be required after the PC is shipped. For 
example, the emerging of “plug and play” standard 
in desktop and portable PCs enables auto- 
configuration of ISA and PCI add-in cards. 
However, since the “plug and play” specification 
continues to evolve, a flash BIOS provides a cost- 
effective capability to update existing PCs. In 
addition, the parameter blocks are ideal for storing 
the required auto-configuration parameters, 
allowing you to integrate the BIOS PROM and 
parameter storage EEPROM into a single 
component, reducing parts costs while increasing 
functionality. 

The 4-Mbit flash memory products are also 
excellent design solutions for digital cellular phone 
and telecommunication switching applications 
requiring very low power consumption, high- 
performance, high-density storage capability, 
modular software designs, and a small form factor 
package. The 4-Mbit’s blocking scheme allows for 
easy segmentation of embedded code with 
16 Kbytes of hardware-protected boot code, four 
main blocks for program code, and two 8-Kbyte 
parameter blocks for frequently updated data 
storage and diagnostic messages (e.g., phone 
numbers, authorization codes). 

Intel’s high integration flash architecture provides a 
flexible voltage solution for the different design 
needs of various applications. The asymmetrically 
blocked memory map allows the integration of 
several memory components into a single flash 
device. The boot block provides a secure boot 
PROM; the parameter blocks can emulate 
EEPROM functionality for parameter store with 
proper software techniques; and the main blocks 
provide code and data storage with access times 
fast enough to execute code in place, decreasing 
RAM requirements. 
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4-MBIT SmartVoltage BOOT BLOCK FAMILY 




Figure 2. 28F004 Interface to lnte!80C188EB 8-Bit Embedded Microprocessor 


1.4 Pinouts 

Intel’s SmartVoltage Boot Block architecture 
provides upgrade paths in most package pinout to 
the 8-Mbit density. The 28F004 40-lead TSOP 
pinout for space-constrained designs is shown in 
Figure 3. The 28F400 44-lead PSOP pinout follows 
the industry-standard ROM/EPROM pinout, as 
shown in Figure 4. For designs that require x16 
operation but have space concerns, refer to the 


48-lead pinout in Figure 5. Furthermore, the 28F400 
56-lead TSOP pinout shown in Figure 6 provides 
backwards compatibility with exisiting 28F400BX 
designs. 

Pinouts for the corresponding 2-Mbit and 8-Mbit 
components are also provided for convenient 
reference. 4-Mbit pinouts are given on the chip 
illustration in the center, with 2-Mbit and 8-Mbit 
pinouts going outward from the center. 
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28F008B 28F002B 28F002B 28F008B 



290530_03 


NOTE: 

1. Pin 12 is DU for BX/BL 12V Vpp Versions. 

2. The 28F008B pinout shown is for the 8-Mbit boot block and not the 28F008SA FlashFile™ memory. 

Figure 3. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 
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NOTE: 

Pin 2 is DU for BX/BL 12V 

Vpp Versions, but for the 8-Mbit device, pin 2 has been changed to A ia 

(WP# on 2/4 Mbit). 

Designs planning on upgrading to the 8-Mbit density from the 2/4-Mbit density in this package should design pin 2 to control 

WP# functionality at the 2/4-Mbit level and allow for pin 2 to control A 18 after upgrading to the 8-Mbit density. 



Figure 4. The 44-Lead PSOP Offers a Convenient Upgrade from JEDEC ROM Standards 
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Register is set to a “1” to indicate a Program 
Failure. If bit 3 is set to a “1,” then Vpp was not 
within acceptable limits, and the WSM did not 
execute the programming sequence. If the program 
operation fails, bit 4 of the Status Register will be 
set within 1 .5 ms as determined by the timeout of 
the WSM. 

The Status Register should be cleared before 
attempting the next operation. Any CUI instruction 
can follow after programming is completed; 
however, reads from the Memory Array, Status 
Register, or Intelligent Identifier cannot be 
accomplished until the CUI is given the Read Array 
command. 


3.3.4 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses identifying the block 
to be erased. These addresses are latched 
internally when the Erase Confirm command is 
issued. Block erasure results in all bits within the 
block being set to “1 .” 

The WSM will execute a sequence of internally 
timed events to: 

1 . Program all bits within the block to “0.” 

2. Verify that all bits within the block are 

sufficiently programmed to “0.” 

3. Erase all bits within the block. 

4. Verify that all bits within the block are 

sufficiently erased. 

While the erase sequence is executing, bit 7 of the 
Status Register is a “0.” 

When the Status Register indicates that erasure is 
complete, the status bits, which indicate whether 
the Erase operation was successful, should be 
checked. If the Erase operation was unsuccessful, 
bit 5 of the Status Register will be set to a “1,” 
indicating an Erase Failure. If V PP was not within 
acceptable limits after the Erase Confirm command 


is issued, the WSM will not execute an erase 
sequence; instead, bit 5 of the Status Register is 
set to a “1” to indicate an Erase Failure, and bit 3 is 
set to a “1” to identify that Vpp supply voltage was 
not within acceptable limits. 

The Status Register should be cleared before 
attempting the next operation. Any CUI instruction 
can follow after erasure is completed; however, 
reads from the Memory Array, Status Register, or 
Intelligent Identifier cannot be accomplished until 
the CUI is given the Read Array command. 

3. 3.4.1 Suspending and Resuming Erase 

Since an erase operation requires on the order of 
seconds to complete, an Erase Suspend command 
is provided to allow erase-sequence interruption in 
order to read data from another block of the 
memory. Once the erase sequence is started, 
writing the Erase Suspend command to the CUI 
requests that the WSM pause the erase sequence 
at a predetermined point in the erase algorithm. The 
Status Register must then be read to determine if 
the erase operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register command. 

During erase suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vm, which 
reduces active current draw. 

To resume the erase operation, the chip must be 
enabled by taking CE# to Vil, then issuing the 
Erase Resume command. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of a standard erase operation, the 
Status Register must be read, cleared, and the next 
instruction issued in order to continue. 
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Data = 40H 
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Addr = Word/Byte to Program 

Write 
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Data = Data to Program 
Addr = Location to Program 



Status Register Data 
Toggle CE# or OE# 
to Update SRD. 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 


Full Status 
Check if Desired 


Repeat for subsequent Word/Byte Writes. 

SR Full Status Check can be done after each Word/Byte 
Write, or after a sequence of Word/Byte Writes. 

Write FFH after the last write operation to reset device to 
read array mode. 


Word/Byte Program 
Complete 




Check SR.4 

1 = Word/Byte Program Error 


SR. 3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State Machine. 

SR.4 is only clear by the Clear Status Register Command, 
in cases where multiple bytes are programmed before full 
status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recove 


Figure 9. Automated Word/Byte Programming Flowchart 
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Block Address 


Read Status 
Register 


Suspend Erase 
Loop 


Bus 

Operation 

Command 

Comments 

Write 

Erase Setup 

Data = 20H 

Addr = Within Block to be Erased 

Write 

Erase 

Confirm 

Data = DOH 

Addr = Within Block to be Erased 



Status Register Data 
Toggle CE# or OE# 
to Update Status Register 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 


Full Status 
Check if Desired 


Repeat for subsequent block erasures. 

Full Status Check can be done after each block erase, 
or after a sequence of block erasures. 

Write FFH after the last operation to reset device to read 
array mode. 


Block Erase 
Complete 


FULL STATUS CHECK PROCEDURE 


Read Status Register 
Data (See Above) 


Bus 

Operation 



Vpp Range Error 


Command Sequence 
Error 


Block Erase 
Error 


Block Erase 
Successful 


Check SR.3 
1 = Vpp Low Detect 


Check SR. 4, 5 
Both 1 = Command 

Sequence Error 


Check SR.5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, before further 
attempts are allowed by the Write State Machine. 

SR.5 is only clear by the Clear Status Register Command, in 
cases where multiple blocks are erase before full status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recovery. 



Figure 10. Automated Block Erase Flowchart 
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Figure 1. 28F002 Interface to lntel80C188EB 8-Bit Embedded Microprocessor 


1.4 Pinouts 

Intel’s SmartVoltage Boot Block architecture 
provides upgrade paths in every package pinout to 
the 8-Mbit density. The 28F002 40-lead TSOP 
pinout for space-constrained designs is shown in 
Figure 3. The 28F200 44-lead PSOP pinout follows 
the industry-standard ROM/EPROM pinout, as 
shown in Figure 4. For designs that require x16 
operation but have space concerns, refer to the 


48-lead pinout in Figure 5. Furthermore, the 28F200 
56-lead TSOP pinout shown in Figure 6 provides 
density upgrades to the 28F400BV as well as 
backwards compatibility with existing 28F200BX/BL 
designs. 

Pinouts for the corresponding 4-Mbit and 8-Mbit 
components are also provided for convenient 
reference. 2-Mbit pinouts are given on the chip 
illustration in the center, with 4-Mbit and 8-Mbit 
pinouts going outward from the center. 
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Figure 3. The 40-Lead TSOP Offers the Smallest Form Factor for Space-Constrained Applications 
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intel. 

Register is set to a “1” to indicate a Program 
Failure. If bit 3 is set to a “1,” then Vpp was not 
within acceptable limits, and the WSM did not 
execute the programming sequence. If the program 
operation fails, bit 4 of the Status Register will be 
set within 1.5 ms as determined by the timeout of 
the WSM. 

The Status Register should be cleared before 
attempting the next operation. Any CUI instruction 
can follow after programming is completed; 
however, reads from the Memory Array, Status 
Register, or Intelligent Identifier cannot be 
accomplished until the CUI is given the Read Array 
command. 


3.3.4 ERASE MODE 

Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses identifying the block 
to be erased. These addresses are latched 

internally when the Erase Confirm command is 
issued. Block erasure results in all bits within the 
block being set to “1 .” 

The WSM will execute a sequence of internally 
timed events to: 

1 . Program all bits within the block to “0.” 

2. Verify that all bits within the block are 

sufficiently programmed to “0.” 

3. Erase all bits within the block. 

4. Verify that all bits within the block are 

sufficiently erased. 

While the erase sequence is executing, bit 7 of the 
Status Register is a “0.” 

When the Status Register indicates that erasure is 
complete, the status bits, which indicate whether 
the Erase operation was successful, should be 
checked. If the Erase operation was unsuccessful, 
bit 5 of the Status Register will be set to a “1,” 
indicating an Erase Failure. If V PP was not within 


2-MBIT SmartVoltage BOOT BLOCK FAMILY 

acceptable limits after the Erase Confirm command 
is issued, the WSM will not execute an erase 
sequence; instead, bit 5 of the Status Register is 
set to a “1” to indicate an Erase Failure, and bit 3 is 
set to a “1” to identify that Vpp supply voltage was 
not within acceptable limits. 

The Status Register should be cleared before 
attempting the next operation. Any CUI instruction 
can follow after erasure is completed; however, 
reads from the Memory Array, Status Register, or 
Intelligent Identifier cannot be accomplished until 
the CUI is given the Read Array command. 

3.3.4.1 Suspending and Resuming Erase 

Since an erase operation requires on the order of 
seconds to complete, an Erase Suspend command 
is provided to allow erase-sequence interruption in 
order to read data from another block of the 
memory. Once the erase sequence is started, 
writing the Erase Suspend command to the CUI 
requests that the WSM pause the erase sequence 
at a predetermined point in the erase algorithm. The 
Status Register must then be read to determine if 
the erase operation has been suspended. 

At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register command. 

During erase suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to Vih, which 
reduces active current draw. 

To resume the erase operation, the chip must be 
enabled by taking CE# to Vil, then issuing the 
Erase Resume command. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of a standard erase operation, the 
Status Register must be read, cleared, and the next 
instruction issued in order to continue. 
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Status Register Data 
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Check SR.7 
1 =WSM Ready 
0 = WSM Busy 


Repeat for subsequent Word/Byte Writes. 

SR Full Status Check can be done after each Word/Byte 
Write, or after a sequence of Word/Byte Writes. 

Write FFH after the last write operation to reset device to 
read array mode. 


Word/Byte Program 
Complete 



Word/Byte Program 
Error 


Check SR.4 

1 = Word/Byte Program Error 


SR. 3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State Machine. 



SR.4 is only clear by the Clear Status Register Command, 
in cases where multiple bytes are programmed before full 
status is checked. 

If error is detected, clear the Status Register before attempting 
retrv or other error recove 


Figure 9. Automated Word/Byte Programming Flowchart 
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Write 20H, 
Block Address 


Write DOH and 
Block Address 


Read Status 
Register 


Suspend Erase 
Loop 
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Full Status 
Check if Desired 
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Operation 

Command 

Comments 

Write 
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Data = 20H 

Addr = Within Block to be Erased 


Erase 

Confirm 

Data = DOH 

Addr = Within Block to be Erased 

Read 


Status Register Data 
Toggle CE# or OE# 
to Update Status Register 




Standby 


Check SR.7 
1 = WSM Ready 
0 = WSM Busy 


Repeat for subsequent block erasures. 

Full Status Check can be done after each block erase, 
or after a sequence of block erasures. 

Write FFH after the last operation to reset device to read 
array mode. 


Block Erase 
Complete 


FULL STATUS CHECK PROCEDURE 


Read Status Register 
Data (See Above) 


Bus 

Operation 


Vpp Range Error 


Command Sequence 
Error 


Block Erase 
Error 


Block Erase 
Successful 


Check SR.3 
1 = Vpp Low Detect 


Check SR.4,5 
Both 1 = Command 

Sequence Error 


Check SR. 5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, before further 
attempts are allowed by the Write State Machine. 

SR. 5 is only clear by the Clear Status Register Command, in 
cases where multiple blocks are erase before full status is checked. 

If error is detected, clear the Status Register before attempting 
retry or other error recovery. 



Figure 10. Automated Block Erase Flowchart 
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28F001BX-T/28F001BX-B 

1M CMOS Flash Memory 




28F001 BX-T/28F001 BX-B 




Program Setup/Program Commands 

Programming is executed by a two-write sequence. 
The Program Setup command (40H) is written to 
the Command Register, followed by a second write 
specifying the address and data (latched on the 
rising edge of WE#) to be programmed. The WSM 
then takes over, controlling the program and verify 
algorithms internally. After the two-command 
program sequence is written to it, the 28F001BX 
automatically outputs Status Register data when 
read (see Figure 9: Byte Program Flowchart). The 
CPU can detect the completion of the program 
event by analyzing the WSM Status bit of the 
Status Register. Only the Read Status Register 
command is valid while programming is active. 

When the Status Register indicates that 
programming is complete, the Program Status bit 
should be checked. If program error is detected, the 
Status Register should be cleared. The internal 
WSM only detects errors for “Is” that do not 
successfully program to “Os”. The Command 
Register remains in Read Status Register mode 
until further commands are issued to it. If byte 
programming is attempted while Vpp = Vppl, the 
Vpp Status bit will be set to “1”. Program attempts 
while Vppl < Vpp < Vpph produce spurious results 
and should not be attempted. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electric fields required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some 
suppliers have implemented redundancy schemes, 
reducing cycling failures to insignificant levels. 
However, redundancy requires that cell size be 
doubled — an expensive solution. 

Intel has designed extensive cycling capability into 
its ETOX flash memory technology. Resulting 
improvements in cycling reliability come without 
increasing memory cell size or complexity. First, an 
advanced tunnel oxide increases charge carrying 
ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the 
probability of oxide defects in the region. Finally, 
the peak electric field during erasure is 
approximately 2 MV/cm lower than EEPROM. The 
lower electric field greatly reduces the oxide stress 
and the probability of failure. 


The 28F001BX-B and the 28F001BX-T are capable 
of 100,000 program/erase cycles on each 
parameter block, main block, and boot block. 

ON-CHIP PROGRAMMING ALGORITHM 

The 28F001BX integrates the Quick-Pulse 
programming algorithm of prior Intel flash memory 
devices on-chip, using the Command Register, 
Status Register, and Write State Machine (WSM). 
On-chip integration dramatically simplifies system 
software and provides processor-like interface 
timings to the Command and Status Registers. 
WSM operation, internal program verify, and Vpp 
high voltage presence are monitored and reported 
via appropriate Status Register bits. Figure 9 shows 
a system software flowchart for device 
programming. The entire sequence is performed 
with Vpp at Vpph. Program abort occurs when RP# 
transitions to Vil or Vpp drops to Vppl. Although the 
WSM is halted, byte data is partially programmed at 
the location where programming is aborted. Block 
erasure or a repeat of byte programming will 
initialize this data to a known value. 


ON-CHIP ERASE ALGORITHM 

As above, the Quick-Erase algorithm of prior Intel 
flash memory devices is implemented internally, 
including all preconditioning of block data. WSM 
operation, erase success, and Vpp high voltage 
presence are monitored and reported through the 
Status Register. Additionally, if a command other 
than Erase Confirm is written to the device after 
Erase Setup has been written, both the Erase 
Status and Program Status bits will be set to “1”. 
When issuing the Erase Setup and Erase Confirm 
commands, they should be written to an address 
within the address range of the block to be erased. 
Figure 10 shows a system software flowchart for 
block erase. 

Erase typically takes 1-4 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows interruption of this erase operation to read 
data from a block other than the block in which 
erase is being performed. A system software 
flowchart is shown in Figure 1 1 . 

The entire sequence if performed with Vpp at Vpph- 
Abort occurs when RP# transitions to Vil or Vpp 
falls to Vppl, while erase is in progress. Block data 
is partially erased by this operation, and a repeat if 
the erase is required to obtain a fully erased block. 
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Program-Verity Command 

The 28F020 is programmed on a byte-by-byte 
basis. Byte programming may occur sequentially or 
at random. Following each programming operation, 
the byte just programmed must be verified. 

The prog ram- verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the 
riding edge of its WE# pulse. The program-verify 
operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F020 applies its internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and the true data means the 
byte was successfully programmed. Programming 
then proceeds to the next desired byte location. 
Figure 5, the 28F020 Quick-Pulse algorithm, 
illustrates how commands are combined with bus 
operations to perform byte programming. Refer to 
AC Programming Characteristics and Waveforms 
for specific timing parameters. 


Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either setup command (erase or program) 
with two consecutive write of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electric fields required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some 
suppliers have implemented redundancy schemes, 
reducing cycling failures to insignificant levels. 
However, redundancy requires that cell size be 
doubled— an expensive solution. 

Intel has designed extensive cycling capability into 
its ETOX flash memory technology. Resulting 
improvements in cycling reliability come without 
increasing memory cell size or complexity. First, an 
advanced tunnel oxide increases charge carrying 


ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the 
probability of oxide defects in the region. Finally, 
the peak electric field during erasure is 
approximately 2 MV/cm lower than EEPROM. The 
lower electric field greatly reduces the oxide stress 
and the probability of failure. 

The 28F020 is capable of 100,000 program/erase 
cycles. The device is programmed and erased 
using Intel’s Quick-Pulse Programming and Quick- 
Erase algorithms. Intel’s algorithmic approach uses 
a series of operations (pulses), along with byte 
verification, to completely and reliably erase and 
program the device. 

For further information, see Reliability Report 
RR-60. 


QUICK-PULSE PROGRAMMING ALGORITHM 

The Quick-Pulse Programming algorithm uses 
programming operations of 10 ms duration. Each 
operation is followed by a byte verification to 
determine when the addressed byte has been 
successfully programmed. The algorithm allows for 
up to 25 programming operations per byte, although 
most bytes verify on the first or second operation. 
The entire sequence of programming and byte 
verification is performed with Vpp at high voltage. 
Figure 5 illustrates the Quick-Pulse Programming 
algorithm. 

QUICK-ERASE ALGORITHM 

Intel’s Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The 
algorithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to 

simultaneously remove charge from all bits in the 
array. 

Erasure begins with a read of memory contents. 
The 28F020 is erased when shipped from the 
factory. Reading FFH from the device would 
immediately be followed by device programming. 

For devices being erased and programmed, uniform 
and reliable erasure is ensured by first 

programming all bits in the device to their charged 
state (Data = 00H). This is accomplished, using the 
Quick-Pulse Programming algorithm, in 

approximately four seconds. 


m 0 
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Erase execution then continues with an initial erase 
operation. Erase verification (Data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is 
encountered. With each erase operation, an 
increased number of bytes verify to the erased 
state. Erase efficiency may be improved by storing 
the address of the last byte verified in a register. 
Following the next erase operation, verification 
starts at that stored address location. Erasure 
typically occurs in two seconds. Figure 6 illustrates 
the Quick-Erase algorithm. 
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28F020 




Bus 

Operation 

Command 

Comments 



Entire Memory Must = 00H 
before Erasure 



Use Quick-Pulse 
Programming Algorithm 
(Figure 5) 

Standby 


Wait for V pp Ramp to VppH* 1 ) 



Initialize Addresses and 
Pulse-Count 

Write 

Set-Up 

Erase 

Data = 20H 

Write 

Erase 

Data = 20H j 

Standby 


Duration of Erase Operation 
(tWHWH2) 

Write 

Standby 

Erase ( 2 ) 
Verify 

Addr = Byte to Verify; 
Data = AOH; Stops Erase 
Operation ( 3 ) 
tWHGL 

Read 


Ready Byte to Verify Erasure 

Standby 


Compare Output to FFH 
Increment Pulse-Count 

Write 

Read 

Data = 00H, Resets the 
Register for Read Operations 

Standby 


Wait for Vpp Ramp to Vpp H e>) 


1 . See DC Characteristics for the value of Vpph and Vppl 3. Refer to principles of operation. 

2. Erase Verify is performed only after chip-erasure. A 4. CAUTION: The algorithm MUST BE FOLLOWED 

final read/compare may be performed (optional) after to ensure proper and reliable operation of the 

the register is written with the Read command. device. 

Figure 6. 20F020 Quick-Erase Algorithm 
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Versions 

Vcc + 5% 

28F020-70( 4 > 




Unit 

V CC + 10% 


28F020-70( 5 > 

28F020-90( 5 > 

28F020-150(5> 

Symbol 

Characterisitcs 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

tAVAv/tRC 

Read Cycle Time 


70 


80 


90 


150 


ns 

tELQv/tCE 

Chip Enable 
Access Time 



70 


80 


90 


120 

ns 

tAVQv/tACC 

Address Access 
Time 



70 


80 


90 


120 

ns 

tGLQv/tOE 

Output Enable 
Access Time 



28 


30 


35 


50 

ns 

tELQX/tLZ 

Chip Enable to 
Output in Low Z 

2,3 

0 


0 


0 


0 


ns 

tEHQZ 

Chip Disable to 
Output in High Z 

2 


35 


40 


45 


55 

ns 

tGLQx/tOLZ 

Output Enable to 
Output in Low Z 

2,3 

0 


0 


0 


0 


ns 

tGHQZ/tDF 

Output Disable to 
Ouput in High Z 

2 


30 


30 


30 


30 

ns 

tOH 

Output Hold from 
Address, CE#, or 
OE# Change 

1,2 

0 


0 


0 


0 


ns 

tWHGL 

Write Recovery 
Time before Read 


6 


6 


6 


6 


MS 



NOTES: 

1 . Whichever occurs first. 

2. Sampled, not 100% tested. 

3. Guaranteed by design. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits fortesting characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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Temperature Products 







28F010 

1024K CMOS Flash Memory 




28F010 


irry. 


Program-Verity Command 

The 28F010 is programmed on a byte-by-byte 
basis. Byte programming may occur sequentially or 
at random. Following each programming operation, 
the byte just programmed must be verified. 

The program-verity operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the 
riding edge of its WE# pulse. The program-verify 
operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 

The 28F010 applies its internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and the true data means the 
byte was successfully programmed. Programming 
then proceeds to the next desired byte location. 
Figure 5, the 28F010 Quick-Pulse algorithm, 
illustrates how commands are combined with bus 
operations to perform byte programming. Refer to 
AC Programming Characteristics and Waveforms 
for specific timing parameters. 

Reset Command 

A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either setup command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED ERASE/PROGRAM CYCLING 

EEPROM cycling failures have always concerned 
users. The high electric fields required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some 
suppliers have implemented redundancy schemes, 
reducing cycling failures to insignificant levels. 
However, redundancy requires that cell size be 
doubled— an expensive solution. 

Intel has designed extensive cycling capability into 
its ETOX flash memory technology. Resulting 
improvements in cycling reliability come without 
increasing memory cell size or complexity. First, an 
advanced tunnel oxide increases charge carrying 


ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the 
probability of oxide defects in the region. Finally, 
the peak electric field during erasure is 
approximately 2 MV/cm lower than EEPROM. The 
lower electric field greatly reduces the oxide stress 
and the probability of failure. 

The 28F010 is capable of 100,000 program/erase 
cycles. The device is programmed and erased 
using Intel’s Quick-Pulse Programming and Quick- 
Erase algorithms. Intel’s algorithmic approach uses 
a series of operations (pulses), along with byte 
verification, to completely and reliably erase and 
program the device. 

For further information, see Reliability Report 
RR-60. 


QUICK-PULSE PROGRAMMING ALGORITHM 

The Quick-Pulse Programming algorithm uses 
programming operations of 10 ps duration. Each 
operation is followed by a byte verification to 
determine when the addressed byte has been 
successfully programmed. The algorithm allows for 
up to 25 programming operations per byte, although 
most bytes verify on the first or second operation. 
The entire sequence of programming and byte 
verification is performed with Vpp at high voltage. 
Figure 5 illustrates the Quick-Pulse Programming 
algorithm. 


QUICK-ERASE ALGORITHM 

Intel’s Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The 
algorithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to 
simultaneously remove charge from all bits in the 
array. 

Erasure begins with a read of memory contents. 
The 28F010 is erased when shipped from the 
factory. Reading FFH from the device would 
immediately be followed by device programming. 

For devices being erased and programmed, uniform 
and reliable erasure is ensured by first 
programming all bits in the device to their charged 
state (Data = 00H). This is accomplished, using the 
Quick-Pulse Programming algorithm, in 
approximately four seconds. 
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Erase execution then continues with an initial erase 
operation. Erase verification (Data = FFH) begins at 
address 0000H and continues through the array to 
the last address, or until data other than FFH is 
encountered. With each erase operation, an 
increased number of bytes verify to the erased 
state. Erase efficiency may be improved by storing 
the address of the last byte verified in a register. 
Following the next erase operation, verification 
starts at that stored address location. Erasure 
typically occurs in two seconds. Figure 6 illustrates 
the Quick-Erase algorithm. 
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Temperature Products 


O 


o 

LL 

CO 


Versions 

Vcc + 5% 

28F01 0-65( 4 ) 







Vcc + 10% 


28F010-65< 5 > 

28F01 0-90( 5 ) 

28F01 0-1 20(5) 

28F01 0-1 50( 5 ) 

Unit 

Symbol 

Characterisitcs 

Notes 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 

Min 

Max 


tAVAV/tRC 

Read Cycle Time 


65 


70 


90 


120 


150 


ns 

tELQV/tCE 

Chip Enable Access 
Time 



65 


70 


90 


120 


150 

ns 

tAVQV/tACC 

Address Access Time 



65 


70 


90 


120 


150 

ns 

tGLQV/tOE 

Output Enable Access 
Time 



25 


28 


35 


50 


55 

ns 

tELQX/t|_Z 

Chip Enable to Output 
in Low Z 

2,3 

0 


0 


0 


0 


0 


ns 

tEHQZ 

Chip Disable to Output 
in High Z 

2 


35 


40 


45 


55 


55 

ns 

tGLQX/tOLZ 

Output Enable to 
Output in Low Z 

2,3 

0 


0 


0 


0 


0 


ns 

tGHQZ/tDF 

Output Disable to 
Ouput in High Z 

2 


30 


30 


30 


30 


35 

ns 

tOH 

Output Hold from 
Address, CE#, or OE# 
Change 

1,2 

0 


0 


0 


0 


0 


ns 

tWHGL 

Write Recovery Time 
before Read 


6 


6 


6 


6 


6 


ps 


NOTES: 

1 . Whichever occurs first. 

2. Sampled, not 100% tested. 

3. Guaranteed by design. 

4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits fortesting characteristics. 

5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 
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ERASE AND PROGRAMMING PERFORMANCE 


Parameter 

Notes 

Min 

Typical 

Max 

Unit 

Chip Erase Time 

1,3,4 


2 

30 

Sec 

Chip Program Time 

1,2,4 


4 

25 

Sec 


NOTES: 

1 . ‘Typicals” are not guaranteed, but based on samples from production lots. Data taken at 25°C, 12.0V Vpp. 

2. Minimum byte programming time excluding system overhead is 16 psec (10 psec program + 6 psec write recovery), while 
maximum is 400 psec/byte (16 psec x 25 loops allowed by algorithm). Max chip programming time is specified lower than 
the worst case allowed by the programming algorithm since most bytes program significantly faster than the worst case 
byte. 

3. Excludes 00H programming prior to erasure. 

4. Excludes system level overhead. 
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Figure 4. The Traditional System Memory Architecture 
Adds Complexity in Order to Optimize Performance 



Figure 5. A Flash Memory-Based System Memory Architecture 
Achieves Performance without Tradeoffs 


This application note compares the read performance 
and power consumption of Intel’s 28F016XS Flash 
memory to that of more traditional memory alternatives, 
based on specifications available at the time this 
document was published. The 28F016XS Flash memory 
is a new member of the Intel 16-Mbit flash memory 
product family. Significant 28F016XS enhancements 
compared to previous flash memories include: 

® A synchronous pipelined read interface that 
optimizes the performance of today’s leading-edge 
microprocessors and buses, and 

• SmartVoltage technology 


This analysis focuses on the highest read performance 
versions of the highest-density products for each 
memory technology. Also discussed, are 28F016XS- 
based system memory architecture advantages over 
traditional alternatives in terms of performance, 
complexity, cost, power consumption and reliability. For 
complete information on Intel’s 28F016XS flash 
memory, consult documentation listed in the Additional 
Information section. 
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getting the system’s BIOS code to copy the file before or 
during POST. 

Either option is possible. The choice is dependent on 
determining which is easier, modifying hardware or 
modifying a BIOS boot-up process. 

3.4 RFA Control Logic Overview 

This section describes the logic design for the RFA 
controller. Timing analysis is also provided to draw 
special attention to some of the difficulties and their 
resolutions. Lastly, a discussion of possible future 
enhancements is presented. 


As shown in the block diagram, Figure 1, the EPX780 
provides the interface between the CPU and the flash 
memory. The following components are utilized in 
this sub-system design: 

• 25 MHz 3.3V 486 SX CPU 

• Altera’ s EPX780-132 PLD 

• 4 28F016SV-75 1M x 16-bit flash memory devices 

• 32-bit Transceiver 

(4 x 8-bit or 2 x 16-bit, t PD <15 ns) 

The signal names used in the diagrams are described in 
Table 1 


Intel486™ SX CPU-RFA Sub-System Design 



292149-7 


Figure 1. RFA Block Diagram 
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Table 1. Signal Name Descriptions 


Signal name 

Signal Description 

CLK 

Clock input to the subsystem, assumed 25 MHz 

ADS# 

Address Strobe from the GPU 

W/R# 

Write/Read# signal from CPU 

M/i/o# 

Memory/i/o# signal from CPU 

D/C# 

Data/Code# signal from CPU 

WE# 

Write Enable# signal from EPX780 to flash memory 

OE# 

Output Enable# signal from EPX780 to flash memory 

RDY# 

Ready# signal from EPX780 to CPU 

KEN# 

Cache Enable# signal from EPX780 to CPU 

DT/R# 

Data Transmit/Receive# signal from EPX780 to transceiver 

ABUSi 

Address Bus, A23-A2 from CPU to EPX780 

ABUSo 

Address Bus, A21-A2 from EPX780 to flash memory 

BSEL# 

Byte Enable# signals, BEO-3# from CPU to EPX780 

CE# 

Chip Enable# signals, CEHO-1# & CELO-1 from EPX780 to flash memory 

DBUS 

Data Bus, D31-D0 from CPU to EPX780 and transceiver 

FLASH DBUS 

Data Bus, D31-D0 from transceiver to flash memory 

ADSWREG 

Sliding Window Register select 

ADS1..4 

Address Strobe delay flip-flop chain 

SWREG 

Sliding Window Register 


NOTE: 

A “#” after the name means inverted or active low. s|iding Wind0w Address Register Interface 


Logic Design 

The logic design (see Figure 8) for the EPX780 RFA 
controller was split into the following three subdivisions 
from a design standpoint: 

• Sliding Window Address Register interface 

• ROM Stub Window mapping function 

• Chip enable logic for memory devices 


The necessary address decoding for the actual loading of 
the Sliding Window Address Register with the base 
address of the window on the data bus is done using a 
simple AND function. Similarly, allowing the address 
bits to propagate out of the register to the address bus 
upon access to the window is done using a 2x1 mux for 
each bit with the address decode as the select. 
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Included below are the equations for the EPX780 

EPX780-10 PLD 


; Functional model for Simulation of Resident Flash Array design 

Title 486SX RFA design 

Pattern 1 

Revision 4.0 

Author Rajiv Parikh 

Company Intel Corporation 

Date 9/20/94 

; This design has not been verified, it is sample code only. 

; Intel assumes no responsibility for any errors which may appear 
; in this code. 

OPTIONS DRIVE_LEVEL = 3 VOLT ; Default voltage is 3 Volts 
CHIP U1 NFX780_132 


; Pinlist 
; inputs 


PIN 

CLK 

; main clock (used by register) 

; Control signals from CPU 


PIN 

W R 

; Write/Read# from CPU 

PIN 

M 10 

; M/i/o# from CPU 

PIN 

/ADS 

; ADS# from CPU 

PIN 

D_C 

; D/C# from CPU 

PIN 

A[23:2] 

; Address lines from CPU, 0,1,24-31 not used 

PIN 

/BE[3:0] 

; Byte Enable lines from CPU 

; Control signals from PLD to memory 

; outputs 
PIN 

B[23:2] 

; Address lines out of PLD to memory (23,22 NC) 

PIN 

/CEH[1:0] 

; Chip enable out of PLD to memory high word 

PIN 

/CEL[1:0] 

; Chip enable out of PLD to memory low word 

PIN 

/WE 

; Write Enable# from PLD to memory 

PIN 

/OE 

; Output Enable# from PLD to memory 

; Other signals 


; input 
PIN 

ry_by 

; Ready/Busy# from memory to PLD/486 

; outputs 
PIN 

/RDY 

; Ready# from PLD to CPU 

PIN 

/KEN 

; Cache enable# from PLD to CPU 
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Figure 6. Comparing Past Address with Current Address to Determine Whether an Alternating^ or 
Same-A! Access Occurs When Interfacing the 28F016XS to a Pipelined Bus Processor 


Pipelined Bus 

A pipelined bus activates the address and control signals 
for the next cycle before completing the current cycle. 
Pipelined buses have no defined access order; therefore, 
Altemating-Aj accesses are not guaranteed. The 
interface must guard against a possible mixture of 
consecutive Altemating-Aj and Same-Aj accesses. 
Figure 6 illustrates a pipelined bus interface to the 
28F016XS. 

In a pipelined interface, the system logic does not 
increment the 28F016XS’s lower addresses. The system 
logic instead latches address and compares it to of 
the following cycle. Comparing A h the interface logic 
can identify Alternating- A 7 and Same-Aj accesses, 
which directly informs the interface logic when it can 
initiate a read access to the 28F016XS. The Altemating- 
A j and Same-A 1 access rules define the minimum delay 
between consecutive accesses (see Section 4.2 and 4.3). 

In the past, external latches were required to latch the 
next address and control signals. The 28F016XS 
eliminates this extra system overhead, latching the next 
address internally and initiating the next cycle prior to 
completing the current cycle. The 28F016XS’s 
synchronous pipelined interface takes full advantage of 
a pipelined bus. 


4.0 INTERFACING TO THE 28F016XS 

The 28F016XS can interface to a wide range of CPUs 
and bus architectures. Glue logic is minimal and the 
performance enhancements are significant. Below are 
key considerations to keep in mind when interfacing to 
the 28F016XS: 

o Clocking Options 
° Altemating-A 1 Access Rule 
o Same-Aj Access Rule 
o Optimizing Read Performance in x8 Mode 
o Consecutive Accesses across Bank Boundaries 
° Handling Asynchronous Write Cycles 
o System Boot-Up out of the 28F016XS 

4.1 Clocking Options 

In choosing a CLK option, keep in mind that the 
28F016XS operates at optimum performance with a 
CLK frequency at an upper SFI Configuration boundary 
(50 MHz and 33 MHz are two of four SFI Configuration 
upper boundaries for the 28F016XS-15 at 5.0V V cc ). 
See Section 2.3 for information about the SFI 
Configuration. 
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Figure 23. Consecutive Alternating-A 1 Accesses Crossing Bank Boundaries, 
One OE# per Bank (28F016XS-15, SFI Configuration = 2) 


4.7 Handling Asynchronous Writes 

The 28F016XS write interface is asynchronous, similar 
to other Intel flash memories. The 28F016XS’s write 
interface is not pipelined, therefore a write cycle must 
complete before another begins. 

When the interfacing CPU can execute a burst write 
cycle, the system logic needs to manage the write cycle, 
allowing only one write cycle to the 28F016XS at a 
time. Write-back caches, for example, support burst 
write cycles. 


When the interfacing CPU does not support burst writes, 
the 28F016XS’s asynchronous write interface is not an 
issue. The processor will only execute one write cycle at 
a time. 

When executing a write cycle, the interfacing processor 
or bus will drive a write signal informing the system of 
the desired operation. Monitoring this signal, the 
interfacing logic can correctly transition into an 
appropriate state machine sequence. In this situation, the 
interfacing logic directly controls the 28F016XS’s write 
control signals (Figure 24), just as with asynchronous 
Intel flash memories. 
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1.0 INTRODUCTION 

This application note discusses comparisons between the 
28F016XD and DRAM memories. It also offers 
recommendations for determining compatibility between 
the 28F016XD and DRAM controllers, and provides 
suggestions for designing DRAM controllers with the 
28F016XD in mind. The 28F016XD, an Intel 16-Mbit 
Flash memory component, retains full software 
backwards-compatibility with the 28F008SA and adds 
the following features: 

• Multiplexed address/address interface with RAS# 
and CAS# control inputs 

• SmartVoltage technology 

• Internal 3.3V/5.0V 

The 28F016XD leverages the existing DRAM controller 
in system designs and thereby minimizes the glue logic 
required to interface to flash memory. It is a 16-Mbit 
device, organized as 1 Mbyte x 16. The 28F016XD has 
ten row addresses and ten column addresses, 
multiplexed on inputs A 0 -A 9 . 

The 28F016XD is fully non-volatile, giving it significant 
power and performance advantages over the traditional 
disk-plus-DRAM alternative. The 28F016XD does not 
lose data when power is removed from the device. By 
permanently storing and executing programs from the 
28F016XD, the inherently slow disk drive-to-DRAM 
load delay is eliminated. The 28F016XD also does not 
require refresh cycles (although the 28F016XD will 
properly ignore any refresh cycles that are issued to it). 


2.0 28F016XD COMPARISONS TO 
DRAM 

The following sections discuss specific areas of 
comparison between the 28F016XD and 16-Mbit (1M x 
16) DRAMs in 60 ns and 70 ns speed bins. Please 
reference the 28F016XD datasheet for a full description 
of the 28F016XD. 


2.1 Voltage and Current 
Specifications 

One obvious difference between the 28F016XD and 
DRAMs is that flash memory specifications reference a 
V PP voltage, used with Data Write and Erase operations. 
All Vpp-related voltage and current specifications are 
unique to the 28F016XD. Note that the 28F016XD 
offers the option to connect Vpp either to 12,0V ± 5% or 
to 5.0V ± 10% (which may also be the V cc operating 
voltage). The 28F016XD includes V cc current 
specifications during Data Write, Erase and Erase 
Suspend operations. These operations are unique to flash 
memory; therefore, these specifications are not found in 
DRAM datasheets. 

The 28F016XD specifies a V LK0 (lockout) voltage. This 
specification relates to circuitry within the flash memory 
that protects it from unwanted data alteration. The V LK0 
specification is not found in DRAM datasheets. The 
28F016XD also provides the deep power-down mode, 
not available on DRAMs. 28F016XD read, standby 
(CMOS), RAS#-only refresh and CAS#-before-RAS# 
refresh currents are lower than those seen with DRAMs. 

A comparison between the 28F016XD and 
representative 16-Mbit DRAMs (valid at the time this 
application note was written) is shown in Table 1. 
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Table 2. 28F016XD Added/Revised DC Characteristics (Continued) 

V CC = 3.3V ± 0.3V, Ta = 0°C to + 70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Unit 

Test Condition 

Icc7 

Vcc Standby Current 
(Self Refresh Mode) 


40 

55 

mA 

Vcc = Vcc Max 
RAS#, CAS# = V| L 
Iout = 0 mA 
Inputs = Vil or Vih 

ICCD 

V cc Deep Power-Down 
Current 


2 

5 

ma 

RP# = GND ± 0.2V 

Iccw 

V cc Word Write Current 


8 

12 

mA 

Word Write in Progress 
Vpp = 12.0V ± 5% 


8 

17 

mA 

Word Write in Progress 
Vpp = 5.0V ± 10% 

ICCE 

V cc Block Erase Current 


6 

12 

mA 

Block Erase in Progress 
Vpp = 12.0V ± 5% 


9 

17 

mA 

Block Erase in Progress 
Vpp = 5.0V ± 10% 

ICCES 

Vcc Erase Suspend 
Current 


1 

4 

mA 

RAS#, CAS# = Vih 
B lock Erase Suspended 

Ipps 

Vpp Standby/Read 
Current 


±1 

±10 

MA 

Vpp < Vcc 


30 

200 

ma 

Vpp > Vcc 

IPPD 

Vpp Deep Power-Down 
Current 


0.2 

5 

PA 

RP# = GND ± 0.2V 

Ippw 

Vpp Word Write Current 


10 

15 

mA 

Vpp = 12.0V ±5% 

Word Write in Progress 


15 

25 

mA 

Vpp = 5.0V ± 10% 

Word Write in Progress 

IPPE 

Vpp Block Erase Current 


4 

10 

mA 

Vpp = 12.0V ±5% 

Block Erase in Progress 


14 

20 

mA 

Vpp = 5.0V ± 10% 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend 
Current 


30 

50 

MA 

Block Erase Suspended 

VppLK 

Vpp Erase/Write Lock 
Voltage 

0.0 


1.5 

V 


VpphI 

Vp P during Write/Erase 
Operations 

4.5 

5.0 

5.5 

V 


Vpph2 

Vpp during Write/Erase 
Operations 

11.4 

12.0 

12.6 

V 


Vlko 

V cc Erase/Write Lock 
Voltage 

2.0 



V 
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Table 3. 28F016XD Added/Revised DC Characteristics (Continued) 

V cc = 5.0V ± 0.5V, T a = Q°C to +7Q°C 


Sym 

Parameter 

Min 

Typ 

Max 

Unit 

Test Condition 

Ipps 

Vpp Standby/Read 
Current 


±1 

±10 

pA 

Vpp < Vcc 


30 

200 

pA 

Vpp > Vcc 

IPPD 

Vpp Deep Power-Down 
Current 


0.2 


pA 

RP# = GND ± 0.2V 

Ippw 

Vpp Word Write Current 


7 

12 

mA 

Vpp = 12.0V ±5% 

Word Write in Progress 


17 

22 

mA 

Vpp = 5.0V ±10% 

Word Write in Progress 

IPPE 

Vpp Block Erase Current 


5 

10 

mA 

Vpp = 12.0V ±5% 

Block Erase in Progress 


16 

20 

mA 

Vpp = 5.0V ±10% 

Block Erase in Progress 

IPPES 

Vpp Erase Suspend 
Current 


30 

50 

MA 

Block Erase Suspended 

VppLK 

Vpp EraseA/Vrite Lock 
Voltage 

0.0 


1.5 

V 



Vpp during Write/Erase 
Operations 

4.5 

5.0 

5.5 

V 



Vpp during Write/Erase 
Operations 

11.4 

12.0 

12.6 

V 


Vlko 

Vcc EraseA/Vrite Lock 
Voltage 

2.0 



V 



2.2 Timing Specifications 

28F016XD timing specifications are divided into the 
following categories in the datasheet: 

• Common Parameters 

• Read Cycle 

• Write Cycle 

• Read-Modify-Write Cycle 

® Fast Page Mode Cycle (including fast page mode 
read-modify-write) 

• Refresh Cycle (including refresh period) 

• Miscellaneous 

Many 28F016XD specifications match or improve on 
those of 60 ns and 70 ns DRAMs. Programming 
additional DRAM controller wait states will 
accommodate most slower 28F016XD specs. 


In some cases, specifications that have identical values 
for both reads and writes to DRAM (such as RAS# and 
CAS# pulse widths and hold times), have been 
differentiated (separate specs for read and write) on the 
28F016XD. This differentiation both accurately reflects 
28F016XD functionality and improves the DRAM 
controller interface to 28F016XD, in some cases. 

Common Parameters 

Table 4 compares 28F016XD common parameters to 
DRAM, with incompatible specifications shaded for 
emphasis. Areas where the 28F016XD improves upon 
DRAM specifications are outlined in bold. Notice that 
the 28F016XD’s RAS# precharge time specification is 
much shorter than that for DRAM, while the 
28F016XD’s CAS# precharge time specification is 
slightly longer. Also, the 28F016XD’s row address hold 
time after RAS#, column address hold time after CAS# 
and CAS#-to-RAS# precharge time are slightly longer 
than those for DRAM. 
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Fast Page Mode Cycle Specifications 

28F016XD fast page mode cycle specification 
incompatibilities compared to DRAM have the same 
root causes as the read and write cycle incompatibilities 
described earlier. Fast page mode read-modify-write 
cycles to the 28F016XD will not occur in the majority of 
applications. 

Table 8 compares 28F016XD fast page mode cycle 
specifications to DRAM, with incompatible 
specifications shaded for emphasis. Areas where the 
28F016XD improves upon DRAM specifications are 
outlined in bold. 


Refresh Cycle Specifications 

Flash memory does not require refresh to retain stored 
data contents. However, by interfacing to a DRAM 
controller, it will automatically receive the same refresh 
cycles that DRAM receives. The 28F016XD supports all 
common refresh cycles; CAS#-before-RAS#, RAS#- 
only, hidden and self-refresh. In these modes, it will 
either drive or float the data bus just as a DRAM would. 
Refresh cycles have no other effect on 28F016XD stored 
data. 

Table 9 compares 28F016XD refresh cycle 
specifications to DRAM, with incompatible 
specifications shaded for emphasis. Areas where the 
28F016XD improves upon DRAM specifications are 
outlined in bold. 


Table 8- 28F016XD Fast Page Mode Cycle Specifications Compared to 60-70 ns 16-Mbit DRAM 


Sym 

Description 

DRAM 

(3.3V) 

28F016XD 

(3.3V) 

DRAM 

(5.0V) 

28F016XD 

(5.0V) 

;¥q(r) 

Fast Page Mode Cycle Time (Reads) (min) 

35-45 ns 


35-45 ns 

65 ns 

.jpcSo ^ 

Fast Page Mode Cycle Time (Writes) (min) 

35-45 ns 

80 ns 

35-45 ns 

lllllls: 

WSP(R) 

RAS# Poise Width (Reads) (min) ■ 

60-70 ns 

95 ns 

60 ns 

85 ns 

^RASP(W) 

RAS# Pulse Width (Writes) (min) 

60-70 ns 


60 ns 

65 ns 


Access Time from CAS# Precharge (max) 

35-40 ns 

85 ns 

; 35-40 RSI : 


fepw 

WE# Delay Time from CAS# Precharge (min) 

10 ns 

0 ns 

10 ns 

0 ns : ; 

fepRH(R) 

RAS# Hold Time from CAS# Precharge 
(reads) (min) 

35 ns 


35-45 ns 

65 ns 

*CPR H(W) 

RAS# Hold Time from CAS# Precharge 
(writes) (min) 

35 ns 

80 ns 

35-45 ns 

65 ns 


Fast Page Mode Read-Modify-Write Cycle 
Time (min) 

85 ns 

170 ns 

85-100 ns 

145 ns 
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Table 10 28F016XD Added/Revised AC Timings (Continued) 

V cc = 3.3V ± 0.3V, Vpp = 5.0V ± 0.5V, T A = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 

Wirh"! 

Word Write Time 

TBD 

35 

TBD 

ps 

B 

Block Write Time 

TBD 

1.2 

TBD 

sec 


Block Erase Time 

TBD 

1.4 

TBD 

sec 


Erase Suspend Latency Time to Read 

1.0 

12 

75 

ps 


V cc = 3.3V ± 0.3V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 

1 

Word Write Time 

5 

9 

TBD 

ps 


Block Write Time 

TBD 

0.3 

1.0 

sec 


Block Erase Time 


00 

o 

10 

sec 


Erase Suspend Latency Time to Read 

1.0 

9 

55 

MS 


Table 11. 28F016XD Added/Revised AC Timings 


Versions 


Parameter 


RP# High to RAS# going low 


RP# Set-Up to WE# going low 


Vpp Set-Up to CAS# high at end of write cycle 


WE# High to RY/BY# going low 


RP# Hold from Valid Status Register Data and RY/BY# High 


Vpp Hold from Valid Status Register Data and RY/BY# High 


V cc at 4.5V (minimum) to RP# High 


28F016XD - 85 


Min Max Unit 
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Table 11 28F016XD Added/Revised AC Timings (Continued) 


V cc = 5.0V ± 0.5V, Vpp = 5.0V ± 0.5V, T A = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 


Word Write Time 

TBD 

25 

TBD 

MS 


Block Write Time 

TBD 

0.85 

TBD 

sec 


Block Erase Time 

TBD 

1.0 

TBD 

sec 


Erase Suspend Latency Time to Read 

1.0 

9 

55 

MS 


V cc = 5.0V ± 0.5V, Vpp = 12.0V ± 0.6V, T A = 0°C to +70°C 


Sym 

Parameter 

Min 

Typ 

Max 

Units 


Word Write Time 

4.5 

6 

TBD 

MS 


Block Write Time 

TBD 

0.2 

1.0 

sec 


Block Erase Time 

0.3 

0.6 

10 

sec 


Erase Suspend Latency Time to Read 

1.0 

7 

40 

MS 


2.3 Package and Pinout 

Although the 28F016XD includes all necessary inputs 
and outputs for interfacing to DRAM controllers, its 
pinout and package do not match those of DRAMs but 
instead evolve from other 16-Mbit Intel flash memories. 
The 28F016XD uses a 56-lead TSOP package, with 
pinout shown in Figure 1 and package dimensions 
shown in Figure 2. 

Comparable 1M x 16 (16-Mbit) DRAMs use two 
packages, a 42-lead SOJ and 44-lead TSOP. Examples 
of these DRAM pinouts are shown in Figures 3 and 4. 


Table 12 summarizes pinout comparisons between the 
28F016XD in 56-lead TSOP and various DRAM 
package options. 

If compatibility between the 28F016XD and DRAM 
“footprints” is desired, 28F016XD flash memories can 
be placed on DRAM-compatible SIMMs. Please see the 
Additional Information section of this application note 
for documentation that covers this topic in more detail. 


3*155 


ADVANCE INFORMATION 


364 














































Application Note-377 




AP-377 


28F016SA Commands 

The 28F016SA command set is a superset of the 
28F008SA command set, giving existing 28F008SA 
code the ability to run on the 28F016SA with minimal 
modifications. 

28F008SA-Compatible Commands 

00 invalid/reserved 

20 single block erase 

40 word/byte write 

50 clear status registers 

70 read CSR 

90 read ID codes 

B0 erase suspend 

DO confirm/resume 

FF read flash array 

28F016SA Performance-Enhancement 
Commands 

OC page buffer write to flash 

71 read GSR and BSRs (i.e. the ESR) 

72 page buffer swap 

74 single load to page buffer 

75 read page buffer 

77 lock block 

80 abort 

96, xx RY/B Y# reconfiguration and SFI 

configuration (28F016XS) 

97 upload BSRs with lock bit 

99 upload device information 

A7 erase all unlocked blocks 

E0 sequential load to page buffer 

F0 sleep 

FB two-byte write 


28F016XD and 28F016XS Feature Sets 

The following features are not supported on the 
28F016XD and 28F016XS Embedded Flash RAM 
memories (as compared to the 28F016SA/SV/32SA 
FlashFile™ memories): 

• All page buffer operations (read, load, program, 
Upload Device Information) 

• Command queuing 

• Erase All Unlocked Blocks and Two-Byte Write 

• Software Sleep and Abort 

o RY/BY# reconfiguration via the Device 
Configuration command 
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Memory Cards 

Many computer manufacturers are pursuing the IC 
memory card to incorporate a removable mass storage 
medium. This is an ideal application for the Intel Flash 
Memory TSOP, due to the package’s minimal height. 

Solid-State Memory Alternatives 

ROM and SRAM are currently the dominant IC card 
memory technologies. ROM has the advantage of being 
inexpensive, but is not changeable. When newer 
software revisions (e.g., Lotus* 123, Windows, etc.) are 
available, the user must buy a new ROM card for each 
upgrade. Intel Flash Memory’s reprogrammability 
minimizes the user’s expense and the OEM’s inventory 
risk. 

SRAM is reprogrammable but requires batteries to 
maintain data, risking data loss. Like magnetic disks, 
flash memory is truly nonvolatile and thus has very long 
storage time with power off. Additionally, SRAM is 


expensive and not a high density solution. Intel Flash 
Memory provides a denser, more cost effective and 
reliable solution. 

System level cost is about the same for Intel Flash 
Memory and SRAM + battery — 

Flash memory requires 12V for programming and 
erasing. If a 12V supply is not available, 5V can easily 
be boosted. (See Application Note AP-316.) SRAM + 
battery requires battery state detect circuitry. 

Card level cost differences are substantial (Figure 3) — 

SRAM must have a battery to retain data. It also requires 
a Vcc monitor and Write Lockout circuitry. Intel’s Flash 
Memory only requires Write Lockout circuitry 
(switching Vpp to OV is an alternative write protect). 
This leads to increased area for memory components. 
More importantly, Intel’s Flash Memory density is 
4 times that of static RAM, yielding lower cost per bit. 


CARD LEVEL 


SYSTEM LEVEL 


Voltage 

Conversion 


FLASH 


SRAM 


Higher Densities 

Increased Area 
for Memory 
Components 



FLASH 


V cc Monitor 
Circuits 

Write 

Lockout 

Circuit 

Lower 

Densities 


SRAM 



Figure 3. Support Circuitry Cost Comparison 
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Figure 1. The flow chart shows the fundamental 
nature of an adaptive algorithm. Based on the 
outcome of program verification, the flow may 
loop back for another program operation. 


Moving Charge and Other Factors You 
Should Know 

This section discusses the mechanics of flash memory 
programming. For most system designers, transistor- 


level discussions were last heard in college. We may 
recall that DRAM consists of a storage capacitor and a 
transistor. We remember this clearly because failure to 
refresh that capacitor causes systems to malfunction. In 
like fashion, one should understand the fundamentals 
of flash memory reprogramming. The understanding 
will enable error-free memory operation and reliable 
system performance. 

In simplest terms, each data bit equates to a memory 
cell. Intel’s flash memory uses one transistor per cell 
with the smallest possible architecture. This delivers the 
lowest cost per bit and highest capacity, levering system 
software (rather than bulky, complex cells) for 
reprogramming control. 

Figure 2 shows a simplified cross section of Intel’s flash 
memory transistor. Note the structure; the cell is a 
stacked gate MOS transistor. An isolated floating gate 
stores the memory charge. The floating gate consists of a 
layer of (conductive) polysilicon surrounded by (non- 
conductive) oxide layers. 

On a DRAM cell, each transistor connects to a capacitor 
which stores the memory charge. The major difference 
between flash memory and DRAM derives from their 
cell structure. The DRAM cell loses its charge if not 
refreshed within a few milliseconds. On the other hand, 
the flash memory floating gate maintains its charge as a 
fully nonvolatile memory, similar to ROM or EPROM. 
The structure is isolated and insulated by the field and 
gate oxides-hence the name “floating” gate. 



Figure 2. Simplicity of design assures increasing densities, manufacturability and reliability. 
These are the attributes that drive mainstream memories. 
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Cycling Performance 

Cycling durability has made tremendous gains from 
early first-generation devices, such as the 28F256- 
170P1C2 with a 100-cycle specification. Current 
products, such as Intel’s ETOX III 28F008SA, are 
registering above 1,000,000 cycles. Experiments with 
these units have been conducted to prove their 
reliability. These parts typically do not produce hard 
failures, instead they see program and erase timings 
push out. 

ETOX cycling longevity has progressed due to 
continued improvements in tunnel-oxide quality. As 
oxide layers become cleaner and more consistent, 
cycling-induced electron trapping minimizes. Reduced 
electron trapping helps keep V t distributions tight. 
Additionally, reduced electron trapping improves 
program and erase pulsing efficiencies. This improved 
efficiency lessens the number of pulses required for a 
given operation to succeed, which in turn also reduces 
electron trapping. Since trapping is the primary source 
of program/erase time pushout (i.e., more pulses 
required), higher quality oxides reduce this degradation 
and extend cycling performance. 

Improved source-to-floating gate coupling consistency 
via enhanced cell/array uniformity also extends cycling 
longevity by lowering the number of erase pulses 
required. Additionally, the Intel ETOX cell, in 
combination with optimal WSM control, typically 
requires a very low number of pulse repetitions to 
achieve a program or erase state (typically one pulse for 
programming). This also lessens the pulse count, 
extending cycling livelihood. 

Improvements in isolation, both from cell to cell and 
around the floating gate, have mitigated charge retention 
and data disturb concerns. 


Read Access 

Intel Flash Memory architecture has evolved by leaps 
and bounds since its inception. Read access time (tACc) 
has made significant gains, while maintaining very high 


levels of noise immunity. The 27F64’s fastest speed bin 
was 150 ns, while the 28F016SA will offer a 5.0V 70- 
ns/80-ns version with ±5%/10% Vcc tolerance and a 
3.3V ±0.3V 120-ns version. 

Double metal, introduced on ETOX III, has been the 
biggest contributing factor toward improving read 
access times. This enhancement reduces wordline and 
bitline resistance, thereby enabling faster cell turn-on 
and sensing paths during read operations. Continually- 
improved circuit designs also contribute to shorter read 
timings. Again, cell and array compaction enables 
inclusion of new/additional circuitry that enhance read 
performance, and will also allow future 3.3V parts with 
access times much faster than their 5.0V predecessors. 


FLASH vs. OTHER SEMICONDUCTOR 
MEMORY TECHNOLOGIES 

Intel’s scaling advances in flash memory manufacturing 
and design provide optimal cell/array compaction. In 
roughly twenty-two years, Intel non-volatile memory 
density has grown from 2,048 bits to 16,777,216 bits, a 
factor of 8192x. Figure 15 compares other memory 
types to show relative density progression. The fast 
ramp in ETOX flash memory density results from its 
similarity to EPROM. 

Figure 16 illustrates the relationship between cell sizes 
of different memory types and minimum geometries. As 
dimensions scale, certain memory types become cell- 
size limited (i.e. some components cannot shrink 
proportionally). The memory cost-per-bit learning curve 
shows flash in a strong position. This curve, shown in 
Figure 17, reflects how Intel’s experience reduces cost 
for increased memory density. 

Since the late 1980’s, a new memory sub-system has 
arrived on the market offering an alternative to high- 
density file system media. Intel’s Series 2+ Flash 
Memory Cards take advantage of the 28F016SA and its 
third-generation architecture to provide card densities of 
up to 40 Mbytes and new functionality. This relatively 
new technology offers a solid-state file system (Figure 
18) that will double in density with new ETOX 
generations. 
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Product ■ Innovative embedded flash 

Hiahliahts RAM device: 
nigmigms DRAM-like system interface 

Nonvolatile, updatable and 
low power 

H Better price and performance 
than DRAM + ROM and 
DRAM + HDD: 

Offers higher integration and 
3.3V capability 

Requires lower power and less 
board space 

GB Ideal for embedded applications: 
Datacom 

Office automation 
Telecom 
Computing 
Games 

B Simple DRAM-like interface: 
Allows use of standard 
DRAM controllers 
Optimizes time to market 
Sits directly on a cachable 
bus 



Product Description 

The Intel 28F016XD embedded flash RAM is an innovative 16Mb memory 
component that combines a DRAM-like system interface with the nonvolatility, 
updatability and lower power of flash memory. The 28F016XD embedded flash 
RAM is an ideal solution for embedded applications where redundant code DRAM 
+ ROM or code DRAM + HDD were used for code execution/storage memory. 



tfl Ideal for portable 
applications 

11 Easy interface to systems using 
embedded processors: 

For i960®KX, i960CS, i960JX 
and Intel386™EX CPU-based 
systems 

B Internally partitioned into 32 
software-lockable, 64-KB blocks 

B Smart Voltage feature: 

Supports both 5V and 12V 
device writes and 5V or 3.3V 
device reads 

B First flash memory device with 
DRAM-like interface 


Its simple DRAM-like interface allows use of standard DRAM controllers, opti- 
mizing time to market. In addition, the Intel 28F016XD embedded flash RAM is 
in-system updatable, reducing the risk of early manufacturing as compared to 
DRAM + ROM and DRAM + OTP EPROM options. The Intel 28F016XD 
embedded flash RAM can easily interface to systems using such embedded 
processors as the i960®KX, i960X, i960JX and the Intel386™EX CPU-based 
systems. Several vendors offer 28F016XD embedded flash RAM SIMM modules, 
making it easier to upgrade code DRAM designs to embedded flash RAM. 

The Intel 28F016XD embedded flash RAM is internally partitioned into 32 
software-lockable, 64-KB blocks. Like Intel’s 28F016SV SmartVoltage device, 
the 28F016XD embedded flash RAM supports both 5V and 12V device writes as 
well as 5V or 3.3V device reads. Because the Intel 28F016XS embedded flash 
RAM is a nonvolatile, code storage and execution solution, there is no need for 
refresh, redundant memory or HDD “spin-up” latency when returning from deep 
power-down mode. It also enables instant-on system design. 

The Intel 28F016XD embedded flash RAM, which is the first flash memory device 
with a DRAM-like interface, is particularly well suited for data communications, 
office automation, telecommunications, computing and games. 


*Other brands and names are the property of their respective owners. 
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